a48feee2358d0d3148d1247f036a6d0daf2d46885fff192c5a9754f9a432cabe | Triage

Sharing

General

Target

a48feee2358d0d3148d1247f036a6d0daf2d46885fff192c5a9754f9a432cabe
Size

68KB
Sample

240502-brj2gsfb32
MD5

6efe4d0d588c01be357fab4443b81968
SHA1

59272e592a2f3683f1be38001251cd429d4ad4cf
SHA256

a48feee2358d0d3148d1247f036a6d0daf2d46885fff192c5a9754f9a432cabe
SHA512

d9683a30dcbb9d5fe2b2f288338028a000097398f0c0481780c176badcd5557e16c7ae471ae8a1ec7e2dea202d23e551f795c6930ca4a99616ff34bbbd2cf0da
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8d:Olg35GTslA5t3/w8d

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  a48feee2358d0d3148d1247f036a6d0daf2d46885fff192c5a9754f9a432cabe
- Size
  
  68KB
- MD5
  
  6efe4d0d588c01be357fab4443b81968
- SHA1
  
  59272e592a2f3683f1be38001251cd429d4ad4cf
- SHA256
  
  a48feee2358d0d3148d1247f036a6d0daf2d46885fff192c5a9754f9a432cabe
- SHA512
  
  d9683a30dcbb9d5fe2b2f288338028a000097398f0c0481780c176badcd5557e16c7ae471ae8a1ec7e2dea202d23e551f795c6930ca4a99616ff34bbbd2cf0da
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8d:Olg35GTslA5t3/w8d
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan