69a1a2e674bf76470dfd3f436f3ab006ab27f1c01a450841dd35da155bd7fd21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69a1a2e674bf76470dfd3f436f3ab006ab27f1c01a450841dd35da155bd7fd21
Size

73KB
Sample

240526-2l5zwaeg3v
MD5

058f18dd252644455d18203fcaae3a39
SHA1

1051bb36feb9d471274a66bc4978a4c0817bc99f
SHA256

69a1a2e674bf76470dfd3f436f3ab006ab27f1c01a450841dd35da155bd7fd21
SHA512

36b6fac8e53815ec6e187642b9f84672e66f438fe20db1935e531bd8baecfa6b6f8943f50a79f0004f4063f771267cca2f3fbb6bc9fd4a39476660c7211db7c7
SSDEEP

768:x/n1OLN/xCc0dctPdom0zoEwxq0IEkBVayhtptDk5oSdPUeo0P/uUL6rUlIdUdRZ:xdOnr5IE6P1tAXDPf6YlIdU3ddPNTYGT

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  69a1a2e674bf76470dfd3f436f3ab006ab27f1c01a450841dd35da155bd7fd21
- Size
  
  73KB
- MD5
  
  058f18dd252644455d18203fcaae3a39
- SHA1
  
  1051bb36feb9d471274a66bc4978a4c0817bc99f
- SHA256
  
  69a1a2e674bf76470dfd3f436f3ab006ab27f1c01a450841dd35da155bd7fd21
- SHA512
  
  36b6fac8e53815ec6e187642b9f84672e66f438fe20db1935e531bd8baecfa6b6f8943f50a79f0004f4063f771267cca2f3fbb6bc9fd4a39476660c7211db7c7
- SSDEEP
  
  768:x/n1OLN/xCc0dctPdom0zoEwxq0IEkBVayhtptDk5oSdPUeo0P/uUL6rUlIdUdRZ:xdOnr5IE6P1tAXDPf6YlIdU3ddPNTYGT
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan