21179026444a77908bffbf1ee6546439f4e47997b4fba7e0d9ccc891d681959c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21179026444a77908bffbf1ee6546439f4e47997b4fba7e0d9ccc891d681959c
Size

70KB
Sample

240515-yp26lshb8t
MD5

929a8e5c0d21903e89d926425ebcb4b0
SHA1

2afc6265c5d2681220be827ec4635555c23fb7be
SHA256

21179026444a77908bffbf1ee6546439f4e47997b4fba7e0d9ccc891d681959c
SHA512

9e4a63f947ad5fc44fe4242b962f0fcf077550faa022b86d91075ed2184768d54259b3d30811b307c07f165801295b2e10b8ca3cfc77ab7ae3e6feeb7de577ff
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8X:Olg35GTslA5t3/w8X

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  21179026444a77908bffbf1ee6546439f4e47997b4fba7e0d9ccc891d681959c
- Size
  
  70KB
- MD5
  
  929a8e5c0d21903e89d926425ebcb4b0
- SHA1
  
  2afc6265c5d2681220be827ec4635555c23fb7be
- SHA256
  
  21179026444a77908bffbf1ee6546439f4e47997b4fba7e0d9ccc891d681959c
- SHA512
  
  9e4a63f947ad5fc44fe4242b962f0fcf077550faa022b86d91075ed2184768d54259b3d30811b307c07f165801295b2e10b8ca3cfc77ab7ae3e6feeb7de577ff
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8X:Olg35GTslA5t3/w8X
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan