bdabd716f6f9a748717b8bd720184086e1526ac9b5df8c96bb2848dbec3b3880 | Triage

Sharing

General

Target

bdabd716f6f9a748717b8bd720184086e1526ac9b5df8c96bb2848dbec3b3880
Size

70KB
Sample

240507-a7538aba31
MD5

0ffcb88298d6c2bc20a6777dbbd09120
SHA1

ee55cd50664e594eb7c1f41c8f12d470d6b8f1b9
SHA256

bdabd716f6f9a748717b8bd720184086e1526ac9b5df8c96bb2848dbec3b3880
SHA512

8d6ff29f850e251a9a81a7fd497c5fd3138e56e3e49532f117f9fa5999498a0115f9192c5a6eb668a7b65607e4ce3d67ae0c9932745245a443faaabaf874e226
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slX:Olg35GTslA5t3/w86

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  bdabd716f6f9a748717b8bd720184086e1526ac9b5df8c96bb2848dbec3b3880
- Size
  
  70KB
- MD5
  
  0ffcb88298d6c2bc20a6777dbbd09120
- SHA1
  
  ee55cd50664e594eb7c1f41c8f12d470d6b8f1b9
- SHA256
  
  bdabd716f6f9a748717b8bd720184086e1526ac9b5df8c96bb2848dbec3b3880
- SHA512
  
  8d6ff29f850e251a9a81a7fd497c5fd3138e56e3e49532f117f9fa5999498a0115f9192c5a6eb668a7b65607e4ce3d67ae0c9932745245a443faaabaf874e226
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slX:Olg35GTslA5t3/w86
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan