088f88123ff811b49d524e6796215b15bf4888dcdd6f62a6d88335ebcc742612 | Triage

Sharing

General

Target

088f88123ff811b49d524e6796215b15bf4888dcdd6f62a6d88335ebcc742612
Size

70KB
Sample

240513-wz5clshe58
MD5

05e6012501ca8653d38bf4dbedd9f4d5
SHA1

34074f56b30c3c935e5e26b088df154e2dacf0f1
SHA256

088f88123ff811b49d524e6796215b15bf4888dcdd6f62a6d88335ebcc742612
SHA512

334c046cd93db1b9e20057b144dc151db7a072bc8d32fca703db30f2d4b91c012fb1de3f21e604b577a88350dc96cb04cd519d6fd165945f4473f4439f4fc430
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl1Lx:Olg35GTslA5t3/w8U

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  088f88123ff811b49d524e6796215b15bf4888dcdd6f62a6d88335ebcc742612
- Size
  
  70KB
- MD5
  
  05e6012501ca8653d38bf4dbedd9f4d5
- SHA1
  
  34074f56b30c3c935e5e26b088df154e2dacf0f1
- SHA256
  
  088f88123ff811b49d524e6796215b15bf4888dcdd6f62a6d88335ebcc742612
- SHA512
  
  334c046cd93db1b9e20057b144dc151db7a072bc8d32fca703db30f2d4b91c012fb1de3f21e604b577a88350dc96cb04cd519d6fd165945f4473f4439f4fc430
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl1Lx:Olg35GTslA5t3/w8U
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan