7da1bdec380053cacabb4b0a26f7cdcf3b9ae560c2ebaf3a33741a1b2892ad54 | Triage

Sharing

General

Target

7da1bdec380053cacabb4b0a26f7cdcf3b9ae560c2ebaf3a33741a1b2892ad54
Size

72KB
Sample

240526-3jlznagb3x
MD5

0c537ea2cfe551b0ccca1993e213ab84
SHA1

c14146488bdb72b9c1bec5832180925a30bed2ef
SHA256

7da1bdec380053cacabb4b0a26f7cdcf3b9ae560c2ebaf3a33741a1b2892ad54
SHA512

d9b88f5be99bb34b6c3e0111ddd9acbd9e510ad252d68b8dd207268471a7331ae1d55c637640cab592de1ca36a3d43863dd1fcfa49e8ee854c4544978c38855e
SSDEEP

1536:xUzOORyuTKxBpkcoIOgm5qyrY4xhzO2dsu:a/Kx8DIOvqeY4PzOXu

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  7da1bdec380053cacabb4b0a26f7cdcf3b9ae560c2ebaf3a33741a1b2892ad54
- Size
  
  72KB
- MD5
  
  0c537ea2cfe551b0ccca1993e213ab84
- SHA1
  
  c14146488bdb72b9c1bec5832180925a30bed2ef
- SHA256
  
  7da1bdec380053cacabb4b0a26f7cdcf3b9ae560c2ebaf3a33741a1b2892ad54
- SHA512
  
  d9b88f5be99bb34b6c3e0111ddd9acbd9e510ad252d68b8dd207268471a7331ae1d55c637640cab592de1ca36a3d43863dd1fcfa49e8ee854c4544978c38855e
- SSDEEP
  
  1536:xUzOORyuTKxBpkcoIOgm5qyrY4xhzO2dsu:a/Kx8DIOvqeY4PzOXu
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan