d1dc098833ccda7289fc21d99a2285eb07173f26f1a0d8a62fb17037a86061a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1dc098833ccda7289fc21d99a2285eb07173f26f1a0d8a62fb17037a86061a0
Size

69KB
Sample

240522-jrxatagg87
MD5

d2b3da34805a3864f0501fd90c41cf40
SHA1

e2eadae5094629c244fbf50674ffc01e38303747
SHA256

d1dc098833ccda7289fc21d99a2285eb07173f26f1a0d8a62fb17037a86061a0
SHA512

f921de5856c79b179f78e287f18ac573c97e43279be531b8d40edf6dd434923b5f4093a307a7ba9e65773dbc2d1416f65856419713aabfec113211d0dac42b2f
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8D8:Olg35GTslA5t3/w8D8

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  d1dc098833ccda7289fc21d99a2285eb07173f26f1a0d8a62fb17037a86061a0
- Size
  
  69KB
- MD5
  
  d2b3da34805a3864f0501fd90c41cf40
- SHA1
  
  e2eadae5094629c244fbf50674ffc01e38303747
- SHA256
  
  d1dc098833ccda7289fc21d99a2285eb07173f26f1a0d8a62fb17037a86061a0
- SHA512
  
  f921de5856c79b179f78e287f18ac573c97e43279be531b8d40edf6dd434923b5f4093a307a7ba9e65773dbc2d1416f65856419713aabfec113211d0dac42b2f
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8D8:Olg35GTslA5t3/w8D8
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan