d33b87cb9be4c96b24e4ab50d1f351f2ef10d8b574f62f5c0ffed812dbb55aac | Triage

Sharing

General

Target

d33b87cb9be4c96b24e4ab50d1f351f2ef10d8b574f62f5c0ffed812dbb55aac
Size

71KB
Sample

240514-c7st1agd49
MD5

7b898d3c001c38b84d2bef1b52a97a38
SHA1

2068fccb7ce64710a4fb168f1f5c12ef8ea42ce0
SHA256

d33b87cb9be4c96b24e4ab50d1f351f2ef10d8b574f62f5c0ffed812dbb55aac
SHA512

aed66527f47f42ec0b0c82f1d657bea00c0ac3b3452855ac88531dc59d79dfd3532339b99dd25de2d92be1c1e2a2df1533e5eb8f71e681d259358ea1d8f37ef1
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slY:Olg35GTslA5t3/w87

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  d33b87cb9be4c96b24e4ab50d1f351f2ef10d8b574f62f5c0ffed812dbb55aac
- Size
  
  71KB
- MD5
  
  7b898d3c001c38b84d2bef1b52a97a38
- SHA1
  
  2068fccb7ce64710a4fb168f1f5c12ef8ea42ce0
- SHA256
  
  d33b87cb9be4c96b24e4ab50d1f351f2ef10d8b574f62f5c0ffed812dbb55aac
- SHA512
  
  aed66527f47f42ec0b0c82f1d657bea00c0ac3b3452855ac88531dc59d79dfd3532339b99dd25de2d92be1c1e2a2df1533e5eb8f71e681d259358ea1d8f37ef1
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slY:Olg35GTslA5t3/w87
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan