6ecc8e6e9881e605dc2122792ae8a738f1892cc8f9cd996c8cf5483cf22337ce | Triage

Sharing

General

Target

6ecc8e6e9881e605dc2122792ae8a738f1892cc8f9cd996c8cf5483cf22337ce.exe
Size

71KB
Sample

240523-b1at6sha88
MD5

07405f0f892595fa8a956c5f82c75350
SHA1

b7095cee16fa12688cd4aef1e342cf926b9738bb
SHA256

6ecc8e6e9881e605dc2122792ae8a738f1892cc8f9cd996c8cf5483cf22337ce
SHA512

9f313d6790d341aaed6d57ea02d740f881d1ab0491744ff94adcfc53d039dc9b5edf38d3e0f81298a3b25d1aa66638e6542310aed3bc5a317673a266e9c5dd8f
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl3:Olg35GTslA5t3/w86

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  6ecc8e6e9881e605dc2122792ae8a738f1892cc8f9cd996c8cf5483cf22337ce.exe
- Size
  
  71KB
- MD5
  
  07405f0f892595fa8a956c5f82c75350
- SHA1
  
  b7095cee16fa12688cd4aef1e342cf926b9738bb
- SHA256
  
  6ecc8e6e9881e605dc2122792ae8a738f1892cc8f9cd996c8cf5483cf22337ce
- SHA512
  
  9f313d6790d341aaed6d57ea02d740f881d1ab0491744ff94adcfc53d039dc9b5edf38d3e0f81298a3b25d1aa66638e6542310aed3bc5a317673a266e9c5dd8f
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl3:Olg35GTslA5t3/w86
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan