be9073ebae0a85320fe95a4cbeb44f416e93100688b368f0d4974ff30d6f4623 | Triage

Sharing

General

Target

be9073ebae0a85320fe95a4cbeb44f416e93100688b368f0d4974ff30d6f4623
Size

70KB
Sample

240524-c5qlvsad33
MD5

a286168853403006868c69c98d1992ea
SHA1

7c34773e28d5bcc337124741d75ed94070c64731
SHA256

be9073ebae0a85320fe95a4cbeb44f416e93100688b368f0d4974ff30d6f4623
SHA512

20986d110d10f209fe1673b7415bad7082db6d292aec93f1667f39eb342859a3e986974174310eec79aadfda97d104e889a00ebcfa5f1006d2b7229b2651bd00
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8UN:Olg35GTslA5t3/w8UN

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  be9073ebae0a85320fe95a4cbeb44f416e93100688b368f0d4974ff30d6f4623
- Size
  
  70KB
- MD5
  
  a286168853403006868c69c98d1992ea
- SHA1
  
  7c34773e28d5bcc337124741d75ed94070c64731
- SHA256
  
  be9073ebae0a85320fe95a4cbeb44f416e93100688b368f0d4974ff30d6f4623
- SHA512
  
  20986d110d10f209fe1673b7415bad7082db6d292aec93f1667f39eb342859a3e986974174310eec79aadfda97d104e889a00ebcfa5f1006d2b7229b2651bd00
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8UN:Olg35GTslA5t3/w8UN
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan