64fda907232eb9227ffc80d49dc7827dd061013f32a17da82a406e9a6461083a | Triage

Sharing

General

Target

64fda907232eb9227ffc80d49dc7827dd061013f32a17da82a406e9a6461083a
Size

71KB
Sample

240522-2hqqsabe5x
MD5

084eb2b26d71956fbbb12e3666c69640
SHA1

ca39cf2fea320c014e31dc91da1efe4b7ddd44f2
SHA256

64fda907232eb9227ffc80d49dc7827dd061013f32a17da82a406e9a6461083a
SHA512

31e48c944d88b59c143fbd2b3da1200e03cd4eaab02df5ffda19073cc53013fff7db1f4a0b3a000449026c7ffe082026673cc60b0d0ecd34240d45a50eff48c9
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slu/U:Olg35GTslA5t3/w8n/U

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  64fda907232eb9227ffc80d49dc7827dd061013f32a17da82a406e9a6461083a
- Size
  
  71KB
- MD5
  
  084eb2b26d71956fbbb12e3666c69640
- SHA1
  
  ca39cf2fea320c014e31dc91da1efe4b7ddd44f2
- SHA256
  
  64fda907232eb9227ffc80d49dc7827dd061013f32a17da82a406e9a6461083a
- SHA512
  
  31e48c944d88b59c143fbd2b3da1200e03cd4eaab02df5ffda19073cc53013fff7db1f4a0b3a000449026c7ffe082026673cc60b0d0ecd34240d45a50eff48c9
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8slu/U:Olg35GTslA5t3/w8n/U
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan