96a21d4a3c060f7df93bcf13fa1cf890373bab903a07f774f4dcc70ff9864dbc | Triage

Sharing

General

Target

96a21d4a3c060f7df93bcf13fa1cf890373bab903a07f774f4dcc70ff9864dbc
Size

73KB
Sample

240506-3jcqzsgd5y
MD5

d37f5df0dc4590452ec715bbc6854fa9
SHA1

929b3bedcc655b6eb137141bfb5924212ccbcf4a
SHA256

96a21d4a3c060f7df93bcf13fa1cf890373bab903a07f774f4dcc70ff9864dbc
SHA512

6b2bd0f94cccf2e595658e6dc5c56dd663fda6e2d29d5aab99d5ef5380dea1063d771a260b5f2c893331ce5025a9e1a8c624667eea9140ac33acf093c5c68b33
SSDEEP

1536:xGrOhMC7Nb20g6HKF02z5HKgeBGmW9aGu:wrOhRvN2sGmtGu

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  96a21d4a3c060f7df93bcf13fa1cf890373bab903a07f774f4dcc70ff9864dbc
- Size
  
  73KB
- MD5
  
  d37f5df0dc4590452ec715bbc6854fa9
- SHA1
  
  929b3bedcc655b6eb137141bfb5924212ccbcf4a
- SHA256
  
  96a21d4a3c060f7df93bcf13fa1cf890373bab903a07f774f4dcc70ff9864dbc
- SHA512
  
  6b2bd0f94cccf2e595658e6dc5c56dd663fda6e2d29d5aab99d5ef5380dea1063d771a260b5f2c893331ce5025a9e1a8c624667eea9140ac33acf093c5c68b33
- SSDEEP
  
  1536:xGrOhMC7Nb20g6HKF02z5HKgeBGmW9aGu:wrOhRvN2sGmtGu
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan