365bf2475ab1791502cf45c1130de448a70908a312d81c5071092f1da1546644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

365bf2475ab1791502cf45c1130de448a70908a312d81c5071092f1da1546644
Size

69KB
Sample

240510-y1tcvaae58
MD5

2a35c99d57f723670f1a2026daaa33dc
SHA1

2f2543bca5ea6d3a077eb21295465a89f902582f
SHA256

365bf2475ab1791502cf45c1130de448a70908a312d81c5071092f1da1546644
SHA512

35c0f8ba3e42cca5b591c0f5058209a11555a9944ae3a0ba19bb659b0de4cbd7dad441daa4b8223e455aea0c7c09c69f07008f7e1dea29d8eec1051887a47f85
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8D/:Olg35GTslA5t3/w8D/

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  365bf2475ab1791502cf45c1130de448a70908a312d81c5071092f1da1546644
- Size
  
  69KB
- MD5
  
  2a35c99d57f723670f1a2026daaa33dc
- SHA1
  
  2f2543bca5ea6d3a077eb21295465a89f902582f
- SHA256
  
  365bf2475ab1791502cf45c1130de448a70908a312d81c5071092f1da1546644
- SHA512
  
  35c0f8ba3e42cca5b591c0f5058209a11555a9944ae3a0ba19bb659b0de4cbd7dad441daa4b8223e455aea0c7c09c69f07008f7e1dea29d8eec1051887a47f85
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8D/:Olg35GTslA5t3/w8D/
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan