71fc436fdb8183d90168cf9f9ab8c43a83273869b67a80f22e9766170980a776 | Triage

Sharing

General

Target

71fc436fdb8183d90168cf9f9ab8c43a83273869b67a80f22e9766170980a776
Size

70KB
Sample

240522-222bmace28
MD5

b274b1af7459c982daa40643f411dd42
SHA1

c29946333b6b21c04f3df788ee3973c90b3d75ad
SHA256

71fc436fdb8183d90168cf9f9ab8c43a83273869b67a80f22e9766170980a776
SHA512

2e4d73066be52f61ea8531a3a14553d8298114da5af35607765e35bde3b116463291ca3e1245d834aaf59dc509ef83c03ae62ecea2e339a027eb2cf447db8274
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8eU:Olg35GTslA5t3/w8eU

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  71fc436fdb8183d90168cf9f9ab8c43a83273869b67a80f22e9766170980a776
- Size
  
  70KB
- MD5
  
  b274b1af7459c982daa40643f411dd42
- SHA1
  
  c29946333b6b21c04f3df788ee3973c90b3d75ad
- SHA256
  
  71fc436fdb8183d90168cf9f9ab8c43a83273869b67a80f22e9766170980a776
- SHA512
  
  2e4d73066be52f61ea8531a3a14553d8298114da5af35607765e35bde3b116463291ca3e1245d834aaf59dc509ef83c03ae62ecea2e339a027eb2cf447db8274
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8eU:Olg35GTslA5t3/w8eU
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan