5e6a97adc87c364e27c3c72a80ed47e5d8fcf9605eea88cedf0bbc18f243db40 | Triage

Sharing

General

Target

5e6a97adc87c364e27c3c72a80ed47e5d8fcf9605eea88cedf0bbc18f243db40.exe
Size

73KB
Sample

240523-adnl3sec58
MD5

1dbc4b43599d738b319087659829f790
SHA1

f8e0afdb90d6b1262ecb055ccc58d5bd2cc8094e
SHA256

5e6a97adc87c364e27c3c72a80ed47e5d8fcf9605eea88cedf0bbc18f243db40
SHA512

ac54cdc4b2b0e72f3800443484b6e1eb1bcf55a1b5886dd1ee0c8e57f01f4c8fe5cab600c6f6635a0899b9a14fa2850cf1dc652cc21461c061607517e1cf4394
SSDEEP

1536:x/PEBsa9G2usp5yhscwOxffOwnRN8/UZh+bVwNPjX2geT:Mhp5+nOw/VZ8VIL6T

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5e6a97adc87c364e27c3c72a80ed47e5d8fcf9605eea88cedf0bbc18f243db40.exe
- Size
  
  73KB
- MD5
  
  1dbc4b43599d738b319087659829f790
- SHA1
  
  f8e0afdb90d6b1262ecb055ccc58d5bd2cc8094e
- SHA256
  
  5e6a97adc87c364e27c3c72a80ed47e5d8fcf9605eea88cedf0bbc18f243db40
- SHA512
  
  ac54cdc4b2b0e72f3800443484b6e1eb1bcf55a1b5886dd1ee0c8e57f01f4c8fe5cab600c6f6635a0899b9a14fa2850cf1dc652cc21461c061607517e1cf4394
- SSDEEP
  
  1536:x/PEBsa9G2usp5yhscwOxffOwnRN8/UZh+bVwNPjX2geT:Mhp5+nOw/VZ8VIL6T
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan