b4513956a875061e47fa79278fe9d0b76268306a1f92eeff5b7f327093a4094f | Triage

Sharing

General

Target

b4513956a875061e47fa79278fe9d0b76268306a1f92eeff5b7f327093a4094f
Size

73KB
Sample

240516-ct576sge44
MD5

4fe28d98bbe0f7050f82b7f48b4063c0
SHA1

c8b71fb6bb65e612e73231649bf525634d49ce88
SHA256

b4513956a875061e47fa79278fe9d0b76268306a1f92eeff5b7f327093a4094f
SHA512

410bbf57cca23b9d11662eda9ff51b0441fa15b224bb77c9cd98a0da4178e017159bc813858e6084cc126a261cdcdce73a1f7276c7f2264d65b6c6e6fee3216e
SSDEEP

768:x/nlrF9TAbYmFr1BndWdhKjJFJLLeTYSOmPPxfXjGca8Iaxqm4Ts9s5qCfRpXMRo:x5FNAlTnd+5rO0PxfXZVBZq5qYXMER

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  b4513956a875061e47fa79278fe9d0b76268306a1f92eeff5b7f327093a4094f
- Size
  
  73KB
- MD5
  
  4fe28d98bbe0f7050f82b7f48b4063c0
- SHA1
  
  c8b71fb6bb65e612e73231649bf525634d49ce88
- SHA256
  
  b4513956a875061e47fa79278fe9d0b76268306a1f92eeff5b7f327093a4094f
- SHA512
  
  410bbf57cca23b9d11662eda9ff51b0441fa15b224bb77c9cd98a0da4178e017159bc813858e6084cc126a261cdcdce73a1f7276c7f2264d65b6c6e6fee3216e
- SSDEEP
  
  768:x/nlrF9TAbYmFr1BndWdhKjJFJLLeTYSOmPPxfXjGca8Iaxqm4Ts9s5qCfRpXMRo:x5FNAlTnd+5rO0PxfXZVBZq5qYXMER
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan