82a7e072bf3c328e618a1f9d9f1cedeb92d5c8f9432db98bb04a608ed4865f2e | Triage

Sharing

General

Target

82a7e072bf3c328e618a1f9d9f1cedeb92d5c8f9432db98bb04a608ed4865f2e
Size

67KB
Sample

240522-cnnqyahc41
MD5

8efd77f2fe7d1c9aaeffd052fedb9692
SHA1

78482e7a978f37e00c0aa996371c9a5acc423a7a
SHA256

82a7e072bf3c328e618a1f9d9f1cedeb92d5c8f9432db98bb04a608ed4865f2e
SHA512

c32683b3ba5e9b98ab93f0926810d2362e742ec5d6786261d93fae7ad140c757458be2f3572fa634f5614ef7c1a840147a91d947d6d3ae0bc88bbda521aac803
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1+dwK:ulg35GTslA5t3GdwK

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  82a7e072bf3c328e618a1f9d9f1cedeb92d5c8f9432db98bb04a608ed4865f2e
- Size
  
  67KB
- MD5
  
  8efd77f2fe7d1c9aaeffd052fedb9692
- SHA1
  
  78482e7a978f37e00c0aa996371c9a5acc423a7a
- SHA256
  
  82a7e072bf3c328e618a1f9d9f1cedeb92d5c8f9432db98bb04a608ed4865f2e
- SHA512
  
  c32683b3ba5e9b98ab93f0926810d2362e742ec5d6786261d93fae7ad140c757458be2f3572fa634f5614ef7c1a840147a91d947d6d3ae0bc88bbda521aac803
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1+dwK:ulg35GTslA5t3GdwK
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan