10aeaccc556dcee565fcacb1a62bf9e588ba32b693777898caef8de3ccd3967e | Triage

Sharing

General

Target

4bd2a03e1267d1eb59f6b38067ee9f70_NEAS
Size

70KB
Sample

240507-mzt27sff27
MD5

4bd2a03e1267d1eb59f6b38067ee9f70
SHA1

d133f93b05441426537c59ca2d2d26e4bb27cdaa
SHA256

10aeaccc556dcee565fcacb1a62bf9e588ba32b693777898caef8de3ccd3967e
SHA512

76a55d94ce19dd7954b89caa5d55e3daebe4317eff8160fc608e53fb5d8348d03d0f00db78414b1927babeaacf842e07d36aa22652d0beec64d71dbf9e9e0cde
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl+:Olg35GTslA5t3/w85

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4bd2a03e1267d1eb59f6b38067ee9f70_NEAS
- Size
  
  70KB
- MD5
  
  4bd2a03e1267d1eb59f6b38067ee9f70
- SHA1
  
  d133f93b05441426537c59ca2d2d26e4bb27cdaa
- SHA256
  
  10aeaccc556dcee565fcacb1a62bf9e588ba32b693777898caef8de3ccd3967e
- SHA512
  
  76a55d94ce19dd7954b89caa5d55e3daebe4317eff8160fc608e53fb5d8348d03d0f00db78414b1927babeaacf842e07d36aa22652d0beec64d71dbf9e9e0cde
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl+:Olg35GTslA5t3/w85
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan