1aeed189342fb1d604048cf309424f1b7f8474d23978c359c7538763d8880296 | Triage

Sharing

General

Target

1aeed189342fb1d604048cf309424f1b7f8474d23978c359c7538763d8880296
Size

72KB
Sample

240514-xx7kmace37
MD5

0eb42d3ce651fe4cb17dec691793bcaf
SHA1

73a6ce6a5d172300059d505d82c62a4167d8737b
SHA256

1aeed189342fb1d604048cf309424f1b7f8474d23978c359c7538763d8880296
SHA512

431ca30b77474b836c17f91fac0e94860e40a4250a067f903bc9e683dc2d5b1e16f1c20d2f5778017e97f53790d466b08a7d2857a9ef9720728874feb0ff6697
SSDEEP

768:x/nQODtOgZwPeS2oyrw0U/Q7/PM8ee+YLVrvgA4R+Fy0u4ETZC6oLclNLqEntgt6:xo62PVOUY7/2efJDtuZ86LNtG5Mia7

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1aeed189342fb1d604048cf309424f1b7f8474d23978c359c7538763d8880296
- Size
  
  72KB
- MD5
  
  0eb42d3ce651fe4cb17dec691793bcaf
- SHA1
  
  73a6ce6a5d172300059d505d82c62a4167d8737b
- SHA256
  
  1aeed189342fb1d604048cf309424f1b7f8474d23978c359c7538763d8880296
- SHA512
  
  431ca30b77474b836c17f91fac0e94860e40a4250a067f903bc9e683dc2d5b1e16f1c20d2f5778017e97f53790d466b08a7d2857a9ef9720728874feb0ff6697
- SSDEEP
  
  768:x/nQODtOgZwPeS2oyrw0U/Q7/PM8ee+YLVrvgA4R+Fy0u4ETZC6oLclNLqEntgt6:xo62PVOUY7/2efJDtuZ86LNtG5Mia7
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan