b73e196e4e3e1b14f5da2c7e057fc4cf4b52ab60a4e17579cb111ae60d95a461 | Triage

Resubmissions

02/05/2024, 17:07

240502-vmze6afa97 10

02/05/2024, 17:00

240502-vh8g9sda5t 10

Sharing

General

Target

9149b6aafceb5eec9ad9aa039528ffd0.exe
Size

70KB
Sample

240502-vh8g9sda5t
MD5

9149b6aafceb5eec9ad9aa039528ffd0
SHA1

428143dbeb9c3da10d23dbe6c28899fec9a727b3
SHA256

b73e196e4e3e1b14f5da2c7e057fc4cf4b52ab60a4e17579cb111ae60d95a461
SHA512

695937a0418fc7a3283b68461faa1b7ee0382a1e30ba566d06926f6f710bea2dd65d68d9c578a713965d07a6849ecb134de6416aea9426fc37a77f94fac080b4
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slK1:Olg35GTslA5t3/w8X1

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  9149b6aafceb5eec9ad9aa039528ffd0.exe
- Size
  
  70KB
- MD5
  
  9149b6aafceb5eec9ad9aa039528ffd0
- SHA1
  
  428143dbeb9c3da10d23dbe6c28899fec9a727b3
- SHA256
  
  b73e196e4e3e1b14f5da2c7e057fc4cf4b52ab60a4e17579cb111ae60d95a461
- SHA512
  
  695937a0418fc7a3283b68461faa1b7ee0382a1e30ba566d06926f6f710bea2dd65d68d9c578a713965d07a6849ecb134de6416aea9426fc37a77f94fac080b4
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slK1:Olg35GTslA5t3/w8X1
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan