dda452f775e935a21a93028a8056a4240e32e596117302fb913499a51bd21c49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dda452f775e935a21a93028a8056a4240e32e596117302fb913499a51bd21c49
Size

73KB
Sample

240509-ff3rnsbf51
MD5

86aa3d3649f6568f0ec7b7dd9a289e6f
SHA1

db3e2d6dadf30302c582b5c1589adfa6ebd0da62
SHA256

dda452f775e935a21a93028a8056a4240e32e596117302fb913499a51bd21c49
SHA512

2f2143acbfc2c46df955697be945831096dd59e8d52e7742dcfc5778be13cacc77dde2f98eeeb003e9169d76d7bf2f8e8c2e98625399c4e8a175986ec8e82fa5
SSDEEP

1536:xFA56h4XCr4FQ1qOFufvaxsYK281DHK2Fs6UDhDZFSLHXVGIynej55n:Di6aQR0XLF1Dqb6UDhDZFSLHXVEeTn

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  dda452f775e935a21a93028a8056a4240e32e596117302fb913499a51bd21c49
- Size
  
  73KB
- MD5
  
  86aa3d3649f6568f0ec7b7dd9a289e6f
- SHA1
  
  db3e2d6dadf30302c582b5c1589adfa6ebd0da62
- SHA256
  
  dda452f775e935a21a93028a8056a4240e32e596117302fb913499a51bd21c49
- SHA512
  
  2f2143acbfc2c46df955697be945831096dd59e8d52e7742dcfc5778be13cacc77dde2f98eeeb003e9169d76d7bf2f8e8c2e98625399c4e8a175986ec8e82fa5
- SSDEEP
  
  1536:xFA56h4XCr4FQ1qOFufvaxsYK281DHK2Fs6UDhDZFSLHXVGIynej55n:Di6aQR0XLF1Dqb6UDhDZFSLHXVEeTn
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan