71d1d02e59e65ede312dc2cdf32c21401ff602d1bfb00063e7097d16aad19786 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71d1d02e59e65ede312dc2cdf32c21401ff602d1bfb00063e7097d16aad19786
Size

72KB
Sample

240517-aaw42sfg42
MD5

751ab60c24dc385b836483b0222a7644
SHA1

41bc42937dee49e09dc1b85cfd8b550540f6e3fb
SHA256

71d1d02e59e65ede312dc2cdf32c21401ff602d1bfb00063e7097d16aad19786
SHA512

b3ec6d23d2c9dad2ab294c92680bdf22bb1250412882f06fd26055be36f9735c7f1fb049dcaedb5bdc972391b38e49ef9be60e3b606808652352f88f5c0e01fa
SSDEEP

1536:xr9S940hfcXdb8hnrBNf7IdWBeKzKLUHun+zmIGA/czU:W940hNVBIdWBjUDAt

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  71d1d02e59e65ede312dc2cdf32c21401ff602d1bfb00063e7097d16aad19786
- Size
  
  72KB
- MD5
  
  751ab60c24dc385b836483b0222a7644
- SHA1
  
  41bc42937dee49e09dc1b85cfd8b550540f6e3fb
- SHA256
  
  71d1d02e59e65ede312dc2cdf32c21401ff602d1bfb00063e7097d16aad19786
- SHA512
  
  b3ec6d23d2c9dad2ab294c92680bdf22bb1250412882f06fd26055be36f9735c7f1fb049dcaedb5bdc972391b38e49ef9be60e3b606808652352f88f5c0e01fa
- SSDEEP
  
  1536:xr9S940hfcXdb8hnrBNf7IdWBeKzKLUHun+zmIGA/czU:W940hNVBIdWBjUDAt
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2