593d873144e7c288e6acdd87a9fa712beb102e0884381ad871bc6720113aeb1a | Triage

Sharing

General

Target

593d873144e7c288e6acdd87a9fa712beb102e0884381ad871bc6720113aeb1a
Size

73KB
Sample

240520-2nb5ksaa95
MD5

691e9712365a9a7b9a62a1b24f7a1923
SHA1

4f9e92025b64cef0e0dd252be4366478b57d869a
SHA256

593d873144e7c288e6acdd87a9fa712beb102e0884381ad871bc6720113aeb1a
SHA512

8ce6ae6da1317f9095dda72652cb08c37d1096bbe6e680def4162af1f56609dfa629bf9b922821b9b27df8a69a1e345a81e5f42429dc24ed41e326a307736165
SSDEEP

1536:xFIolkbAz986b784UUWcaciQvoyHveRUm:ZsFW7vUULapQA9Um

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  593d873144e7c288e6acdd87a9fa712beb102e0884381ad871bc6720113aeb1a
- Size
  
  73KB
- MD5
  
  691e9712365a9a7b9a62a1b24f7a1923
- SHA1
  
  4f9e92025b64cef0e0dd252be4366478b57d869a
- SHA256
  
  593d873144e7c288e6acdd87a9fa712beb102e0884381ad871bc6720113aeb1a
- SHA512
  
  8ce6ae6da1317f9095dda72652cb08c37d1096bbe6e680def4162af1f56609dfa629bf9b922821b9b27df8a69a1e345a81e5f42429dc24ed41e326a307736165
- SSDEEP
  
  1536:xFIolkbAz986b784UUWcaciQvoyHveRUm:ZsFW7vUULapQA9Um
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan