cc83a9cee64446ef28b32355d1ed9f8e55cfc847fd65b35d4f215abddaf9c2ae | Triage

Sharing

General

Target

cc83a9cee64446ef28b32355d1ed9f8e55cfc847fd65b35d4f215abddaf9c2ae
Size

71KB
Sample

240523-dpn9jabg5t
MD5

344895469f87f8f330019ba08dba8397
SHA1

5c4b2c8d2dae776dd56cbe2a0ecdb1d38c501416
SHA256

cc83a9cee64446ef28b32355d1ed9f8e55cfc847fd65b35d4f215abddaf9c2ae
SHA512

e617f96907c2368d03f72284eee544d06e1a061a6e8ea5f2a4dd1a524480281df6e972cc3ce09d538805b09f88ec9638116e8d51556e4f77001d68203751714e
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8bf:Olg35GTslA5t3/w8bf

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  cc83a9cee64446ef28b32355d1ed9f8e55cfc847fd65b35d4f215abddaf9c2ae
- Size
  
  71KB
- MD5
  
  344895469f87f8f330019ba08dba8397
- SHA1
  
  5c4b2c8d2dae776dd56cbe2a0ecdb1d38c501416
- SHA256
  
  cc83a9cee64446ef28b32355d1ed9f8e55cfc847fd65b35d4f215abddaf9c2ae
- SHA512
  
  e617f96907c2368d03f72284eee544d06e1a061a6e8ea5f2a4dd1a524480281df6e972cc3ce09d538805b09f88ec9638116e8d51556e4f77001d68203751714e
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8bf:Olg35GTslA5t3/w8bf
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan