8f1a7ec4d550a9b5807db7790d54260a44a4e6b6271d47ca8d52f2b4d9e8906b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f1a7ec4d550a9b5807db7790d54260a44a4e6b6271d47ca8d52f2b4d9e8906b
Size

71KB
Sample

240513-3smmjsbb85
MD5

732b564b6e36a0a3e861139db5d75f18
SHA1

65cacb367c12e8ccef4f563180a620da22a7dff6
SHA256

8f1a7ec4d550a9b5807db7790d54260a44a4e6b6271d47ca8d52f2b4d9e8906b
SHA512

1acad075cb91463277332bd1b201a80d44ee3db6d9fd9fcdb49451809ecf59fe5786c4d3a05bcd54e6fb51bc83335386a16a56988bc1283912e290c20d27b589
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slbsI:Olg35GTslA5t3/w8ZI

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8f1a7ec4d550a9b5807db7790d54260a44a4e6b6271d47ca8d52f2b4d9e8906b
- Size
  
  71KB
- MD5
  
  732b564b6e36a0a3e861139db5d75f18
- SHA1
  
  65cacb367c12e8ccef4f563180a620da22a7dff6
- SHA256
  
  8f1a7ec4d550a9b5807db7790d54260a44a4e6b6271d47ca8d52f2b4d9e8906b
- SHA512
  
  1acad075cb91463277332bd1b201a80d44ee3db6d9fd9fcdb49451809ecf59fe5786c4d3a05bcd54e6fb51bc83335386a16a56988bc1283912e290c20d27b589
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slbsI:Olg35GTslA5t3/w8ZI
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan