7d99a127b545c2f9a9fbba7e6245ce1a5aa0052cb2c79195aef7828000ec9403 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d99a127b545c2f9a9fbba7e6245ce1a5aa0052cb2c79195aef7828000ec9403
Size

70KB
Sample

240505-bhbzhshf9x
MD5

bbf91866c7f6e89eaadf41c35fda5bd0
SHA1

b83ae6482b8a388e0f6a0ea976ec3cdfc69c194f
SHA256

7d99a127b545c2f9a9fbba7e6245ce1a5aa0052cb2c79195aef7828000ec9403
SHA512

382e5b00751f63933f8c849154f5b57551138980b6293e7a3a3beca24dac003a2bc56d8b5e2289e689e7f888b68fffe5c1ce3b3b734a16c1e741d6446514ce4f
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sldT+:Olg35GTslA5t3/w8YS

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  7d99a127b545c2f9a9fbba7e6245ce1a5aa0052cb2c79195aef7828000ec9403
- Size
  
  70KB
- MD5
  
  bbf91866c7f6e89eaadf41c35fda5bd0
- SHA1
  
  b83ae6482b8a388e0f6a0ea976ec3cdfc69c194f
- SHA256
  
  7d99a127b545c2f9a9fbba7e6245ce1a5aa0052cb2c79195aef7828000ec9403
- SHA512
  
  382e5b00751f63933f8c849154f5b57551138980b6293e7a3a3beca24dac003a2bc56d8b5e2289e689e7f888b68fffe5c1ce3b3b734a16c1e741d6446514ce4f
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sldT+:Olg35GTslA5t3/w8YS
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan