368e6e01d28fe4ff769e17dfcb7a5b127677f900e5e01b8eb842787ecb3b3fac | Triage

Sharing

General

Target

368e6e01d28fe4ff769e17dfcb7a5b127677f900e5e01b8eb842787ecb3b3fac
Size

70KB
Sample

240522-y7zs7sfc6z
MD5

b72d5e3f65713580472b6155e5f1f1d8
SHA1

81861eaf1fcb18523d9973f040717b490d2533a5
SHA256

368e6e01d28fe4ff769e17dfcb7a5b127677f900e5e01b8eb842787ecb3b3fac
SHA512

792daea173e94cced60741cb96b9dfc45adf3fb5222fe564281e93b4dc2a367b973ef383c7150486773ceeed4c5c3d623a5c58277e8dd216348a6bcaa9b60253
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8B:Olg35GTslA5t3/w8B

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  368e6e01d28fe4ff769e17dfcb7a5b127677f900e5e01b8eb842787ecb3b3fac
- Size
  
  70KB
- MD5
  
  b72d5e3f65713580472b6155e5f1f1d8
- SHA1
  
  81861eaf1fcb18523d9973f040717b490d2533a5
- SHA256
  
  368e6e01d28fe4ff769e17dfcb7a5b127677f900e5e01b8eb842787ecb3b3fac
- SHA512
  
  792daea173e94cced60741cb96b9dfc45adf3fb5222fe564281e93b4dc2a367b973ef383c7150486773ceeed4c5c3d623a5c58277e8dd216348a6bcaa9b60253
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8B:Olg35GTslA5t3/w8B
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan