5facd01cd3e7af19d86721e5b5b611fedbf1d4214c9044eb5a41e85c0f4c60a0 | Triage

Sharing

General

Target

5facd01cd3e7af19d86721e5b5b611fedbf1d4214c9044eb5a41e85c0f4c60a0.exe
Size

72KB
Sample

240523-ajameaec9t
MD5

055c0e2969918ccbafe08c6828d30dd0
SHA1

1d46a4f653b0b467d1be8bd27a8384f660b28fab
SHA256

5facd01cd3e7af19d86721e5b5b611fedbf1d4214c9044eb5a41e85c0f4c60a0
SHA512

721bd2e49a5f0c96050582747f4564bd373bf1020671416965e68901464989e7e593933d57e3b83ba2099377a00b8c99888f9d60f50520bfad3e4e2c81966365
SSDEEP

1536:xUjqejfG/FOxahwjcADmkOMWtCf4Riwdw46X:ajh4FWahwj/OlthQ4U

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5facd01cd3e7af19d86721e5b5b611fedbf1d4214c9044eb5a41e85c0f4c60a0.exe
- Size
  
  72KB
- MD5
  
  055c0e2969918ccbafe08c6828d30dd0
- SHA1
  
  1d46a4f653b0b467d1be8bd27a8384f660b28fab
- SHA256
  
  5facd01cd3e7af19d86721e5b5b611fedbf1d4214c9044eb5a41e85c0f4c60a0
- SHA512
  
  721bd2e49a5f0c96050582747f4564bd373bf1020671416965e68901464989e7e593933d57e3b83ba2099377a00b8c99888f9d60f50520bfad3e4e2c81966365
- SSDEEP
  
  1536:xUjqejfG/FOxahwjcADmkOMWtCf4Riwdw46X:ajh4FWahwj/OlthQ4U
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan