2e08a6f3a8ee4427b25aa23c02ea5771dfe9e921163e5aa1a329f9d233379a50 | Triage

Sharing

General

Target

2e08a6f3a8ee4427b25aa23c02ea5771dfe9e921163e5aa1a329f9d233379a50
Size

72KB
Sample

240524-ywph4ahg68
MD5

2c5ab7f122ce9590dda2287269504a2f
SHA1

d6ba77dc83408baa2b26b2481fee78a51ad8558a
SHA256

2e08a6f3a8ee4427b25aa23c02ea5771dfe9e921163e5aa1a329f9d233379a50
SHA512

3c779801c17590a56fdd5b38821b10cb44355122d2c356bc61c7cb43833e3c1f89394c8adf83740bc09edb5a790b81d39a53e972df3a5dd2e399992ec38e9b4f
SSDEEP

1536:xAyToPledgGkAlSt9yzkwUk6Nr5kEHIwAr:3hgRAlStYzkrJNFkEHC

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  2e08a6f3a8ee4427b25aa23c02ea5771dfe9e921163e5aa1a329f9d233379a50
- Size
  
  72KB
- MD5
  
  2c5ab7f122ce9590dda2287269504a2f
- SHA1
  
  d6ba77dc83408baa2b26b2481fee78a51ad8558a
- SHA256
  
  2e08a6f3a8ee4427b25aa23c02ea5771dfe9e921163e5aa1a329f9d233379a50
- SHA512
  
  3c779801c17590a56fdd5b38821b10cb44355122d2c356bc61c7cb43833e3c1f89394c8adf83740bc09edb5a790b81d39a53e972df3a5dd2e399992ec38e9b4f
- SSDEEP
  
  1536:xAyToPledgGkAlSt9yzkwUk6Nr5kEHIwAr:3hgRAlStYzkrJNFkEHC
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan