b00aa26d9d7889613c7552ce6e17b0264788e24c6166edcf68c47f209ca767f8 | Triage

Sharing

General

Target

b00aa26d9d7889613c7552ce6e17b0264788e24c6166edcf68c47f209ca767f8.exe
Size

98KB
Sample

240509-cb7chsca8t
MD5

0a547347b0b9af0290b263dfa8d71ebe
SHA1

5ff176bfe5e0255a68c8e3d132afbff795a1fc1d
SHA256

b00aa26d9d7889613c7552ce6e17b0264788e24c6166edcf68c47f209ca767f8
SHA512

8e3795bc46783f970c63c56d340e1eb47346bd3e7a9050ed7d1fac77cdcf96e9ec2a955d56b60ca68556a160ab4c0116b2a51d0bbee91c5ded72a3b2b81d5fb0
SSDEEP

1536:79H3LJvFmav82tiLZoS/0XOD7fiq4kzNEAAkHK:hHbCOqb/+i7fRekHK

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  b00aa26d9d7889613c7552ce6e17b0264788e24c6166edcf68c47f209ca767f8.exe
- Size
  
  98KB
- MD5
  
  0a547347b0b9af0290b263dfa8d71ebe
- SHA1
  
  5ff176bfe5e0255a68c8e3d132afbff795a1fc1d
- SHA256
  
  b00aa26d9d7889613c7552ce6e17b0264788e24c6166edcf68c47f209ca767f8
- SHA512
  
  8e3795bc46783f970c63c56d340e1eb47346bd3e7a9050ed7d1fac77cdcf96e9ec2a955d56b60ca68556a160ab4c0116b2a51d0bbee91c5ded72a3b2b81d5fb0
- SSDEEP
  
  1536:79H3LJvFmav82tiLZoS/0XOD7fiq4kzNEAAkHK:hHbCOqb/+i7fRekHK
Score

10^/10

evasion persistence trojan
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan