63245d0f355e8b9c61301b7508daefa7e7c57ad5c6fab1d6f7dd8b09d519c107 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63245d0f355e8b9c61301b7508daefa7e7c57ad5c6fab1d6f7dd8b09d519c107
Size

71KB
Sample

240509-16rgjshe4v
MD5

bad0127f3ddbec692d2c49950fb25d05
SHA1

890e541ad7145297d413c0001d3428a587eff6fe
SHA256

63245d0f355e8b9c61301b7508daefa7e7c57ad5c6fab1d6f7dd8b09d519c107
SHA512

1a63167029775a4ba215ce2a9f90d77fadc89ec177f625c9d40e9d0fc3532c09efc8e78d21cf92ba7e988a8be0a32158c65566bb6e91950e9dccc4a34b0f5f44
SSDEEP

1536:xV3YCONO6mYlRzbR053UmJI8T80zfEGekDWnRe95Zegg+L:KNO6mYlRvaU+jY0YrkSnRY5Ep+L

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  63245d0f355e8b9c61301b7508daefa7e7c57ad5c6fab1d6f7dd8b09d519c107
- Size
  
  71KB
- MD5
  
  bad0127f3ddbec692d2c49950fb25d05
- SHA1
  
  890e541ad7145297d413c0001d3428a587eff6fe
- SHA256
  
  63245d0f355e8b9c61301b7508daefa7e7c57ad5c6fab1d6f7dd8b09d519c107
- SHA512
  
  1a63167029775a4ba215ce2a9f90d77fadc89ec177f625c9d40e9d0fc3532c09efc8e78d21cf92ba7e988a8be0a32158c65566bb6e91950e9dccc4a34b0f5f44
- SSDEEP
  
  1536:xV3YCONO6mYlRzbR053UmJI8T80zfEGekDWnRe95Zegg+L:KNO6mYlRvaU+jY0YrkSnRY5Ep+L
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan