3fa733a171e727fc55d4ce588947e8e7484e5455e9f9b370690619b7b50304ee | Triage

Sharing

General

Target

3fa733a171e727fc55d4ce588947e8e7484e5455e9f9b370690619b7b50304ee.exe
Size

72KB
Sample

240522-z98pkahe28
MD5

1d129dc331921af5576f88651534d040
SHA1

1ecc261760e4a3de383a0926f7cd4d1f9eba3143
SHA256

3fa733a171e727fc55d4ce588947e8e7484e5455e9f9b370690619b7b50304ee
SHA512

46562bd9e19cc65913d3974e63e101fb64e9ddc0f88d3ab124d55854508c363ea1aea8244725ed090bc7633204b1c1e0f2f16479bd05f5a32a6ccf6c40a41070
SSDEEP

768:x/n3i1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08FIsAYaL:x7K8Y1XVVkgVdrI7Q3FIskXJYWL

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  3fa733a171e727fc55d4ce588947e8e7484e5455e9f9b370690619b7b50304ee.exe
- Size
  
  72KB
- MD5
  
  1d129dc331921af5576f88651534d040
- SHA1
  
  1ecc261760e4a3de383a0926f7cd4d1f9eba3143
- SHA256
  
  3fa733a171e727fc55d4ce588947e8e7484e5455e9f9b370690619b7b50304ee
- SHA512
  
  46562bd9e19cc65913d3974e63e101fb64e9ddc0f88d3ab124d55854508c363ea1aea8244725ed090bc7633204b1c1e0f2f16479bd05f5a32a6ccf6c40a41070
- SSDEEP
  
  768:x/n3i1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08FIsAYaL:x7K8Y1XVVkgVdrI7Q3FIskXJYWL
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan