8be3bfdb62ac197fb6ddcf6db5f99212b168c40b28b9474401f06fe8e0e234cb | Triage

Sharing

General

Target

8be3bfdb62ac197fb6ddcf6db5f99212b168c40b28b9474401f06fe8e0e234cb
Size

71KB
Sample

240516-azbjmscc3x
MD5

1fd18ede4817caffb6eab2d5dfdaa99b
SHA1

9792c34c4d986e59600feaf970e6dc4e1bc69acd
SHA256

8be3bfdb62ac197fb6ddcf6db5f99212b168c40b28b9474401f06fe8e0e234cb
SHA512

1de5aac05f261af0afea7f24473782dcabc7f6c5deefe693556bb22b17bc68cb308f5096fda4c82fa61a3ddcfc273af250e6a57c7c4260086187db2a644cb4e2
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Z:Olg35GTslA5t3/w8Z

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8be3bfdb62ac197fb6ddcf6db5f99212b168c40b28b9474401f06fe8e0e234cb
- Size
  
  71KB
- MD5
  
  1fd18ede4817caffb6eab2d5dfdaa99b
- SHA1
  
  9792c34c4d986e59600feaf970e6dc4e1bc69acd
- SHA256
  
  8be3bfdb62ac197fb6ddcf6db5f99212b168c40b28b9474401f06fe8e0e234cb
- SHA512
  
  1de5aac05f261af0afea7f24473782dcabc7f6c5deefe693556bb22b17bc68cb308f5096fda4c82fa61a3ddcfc273af250e6a57c7c4260086187db2a644cb4e2
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Z:Olg35GTslA5t3/w8Z
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan