fb80690d53338a8e6e0fe422912c0087216d596e880b7e99dc1776216201e6a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb80690d53338a8e6e0fe422912c0087216d596e880b7e99dc1776216201e6a7
Size

70KB
Sample

240510-frybbscg2s
MD5

31a26ff5697999e86753f9823940e514
SHA1

2c72b78613bd26404b600d2fda4c4565d3ad7576
SHA256

fb80690d53338a8e6e0fe422912c0087216d596e880b7e99dc1776216201e6a7
SHA512

da1715bbe792987630e9ba7ab073aa8f437c6c992e6d303473acfcddcba53b54e29cbf62af17a974864ad5edd1996a6475d4c033f0cd593770ada1950aa4dd17
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slKz:Olg35GTslA5t3/w8L

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  fb80690d53338a8e6e0fe422912c0087216d596e880b7e99dc1776216201e6a7
- Size
  
  70KB
- MD5
  
  31a26ff5697999e86753f9823940e514
- SHA1
  
  2c72b78613bd26404b600d2fda4c4565d3ad7576
- SHA256
  
  fb80690d53338a8e6e0fe422912c0087216d596e880b7e99dc1776216201e6a7
- SHA512
  
  da1715bbe792987630e9ba7ab073aa8f437c6c992e6d303473acfcddcba53b54e29cbf62af17a974864ad5edd1996a6475d4c033f0cd593770ada1950aa4dd17
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slKz:Olg35GTslA5t3/w8L
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan