0f5860231770bf2d764c27bef180c84ddd9f3e13b6b8245b87994b4fbbaa6c27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5860231770bf2d764c27bef180c84ddd9f3e13b6b8245b87994b4fbbaa6c27
Size

70KB
Sample

240513-xbazjaaa87
MD5

43b7353800361fb1c1844b5c3fff19fa
SHA1

6544e0d24de882856f0af7fcef2025daa1abaef8
SHA256

0f5860231770bf2d764c27bef180c84ddd9f3e13b6b8245b87994b4fbbaa6c27
SHA512

7a416cb5eeb1aac00cf2bad87c679dc6d7d028da028179bb458112462602579cfc46a77d44c92cfbdcf6f4220ef18dfeb2f9778751d9dca81879aac4d48ad883
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8a:Olg35GTslA5t3/w8a

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0f5860231770bf2d764c27bef180c84ddd9f3e13b6b8245b87994b4fbbaa6c27
- Size
  
  70KB
- MD5
  
  43b7353800361fb1c1844b5c3fff19fa
- SHA1
  
  6544e0d24de882856f0af7fcef2025daa1abaef8
- SHA256
  
  0f5860231770bf2d764c27bef180c84ddd9f3e13b6b8245b87994b4fbbaa6c27
- SHA512
  
  7a416cb5eeb1aac00cf2bad87c679dc6d7d028da028179bb458112462602579cfc46a77d44c92cfbdcf6f4220ef18dfeb2f9778751d9dca81879aac4d48ad883
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8a:Olg35GTslA5t3/w8a
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan