06c377e072b4b8aec2cf9244506350c6240ad7d6f5c191270696b2496dc1e2c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06c377e072b4b8aec2cf9244506350c6240ad7d6f5c191270696b2496dc1e2c2
Size

71KB
Sample

240527-w5wmnadd3w
MD5

aa88850d6e384e9b204e1715150130c7
SHA1

5f845899d200f6de6ee0abd6b8e5266274116004
SHA256

06c377e072b4b8aec2cf9244506350c6240ad7d6f5c191270696b2496dc1e2c2
SHA512

093621a0da62d1f07452825b6a96de13206d22b76f86afeab32dd14642c57bc981c694944bb51afc42d905aa03ed5dae26ec005641bfef935d7f723a7829d638
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8JA:Olg35GTslA5t3/w8JA

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  06c377e072b4b8aec2cf9244506350c6240ad7d6f5c191270696b2496dc1e2c2
- Size
  
  71KB
- MD5
  
  aa88850d6e384e9b204e1715150130c7
- SHA1
  
  5f845899d200f6de6ee0abd6b8e5266274116004
- SHA256
  
  06c377e072b4b8aec2cf9244506350c6240ad7d6f5c191270696b2496dc1e2c2
- SHA512
  
  093621a0da62d1f07452825b6a96de13206d22b76f86afeab32dd14642c57bc981c694944bb51afc42d905aa03ed5dae26ec005641bfef935d7f723a7829d638
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8JA:Olg35GTslA5t3/w8JA
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan