0acd992619daac8daca68697e519b7d08b6fba589b539131ab9eb3e48c5a6973 | Triage

Sharing

General

Target

0acd992619daac8daca68697e519b7d08b6fba589b539131ab9eb3e48c5a6973
Size

73KB
Sample

240529-w72axsec46
MD5

d7110126cfbe0c515ca4325e5b1a3e6c
SHA1

bad781015a5d474e1d24a4ade48f9c0867b65cba
SHA256

0acd992619daac8daca68697e519b7d08b6fba589b539131ab9eb3e48c5a6973
SHA512

a8a38dbe9ceb7517154e086677463501ab9fde84c4f219cf6644e6335eca3dc59bc7658cc40114624bfb57560d7beeb048a65b853f98b8535df59e111c34b820
SSDEEP

768:x/nHTvdHlFSGdaOz5lzKiBMZcf8uyXWWcwZ5va/ICf3Ul0L997exIEEchfJ4lgZ:xvpfdz5QiBMZckLXWVo7k687exnEc13Z

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0acd992619daac8daca68697e519b7d08b6fba589b539131ab9eb3e48c5a6973
- Size
  
  73KB
- MD5
  
  d7110126cfbe0c515ca4325e5b1a3e6c
- SHA1
  
  bad781015a5d474e1d24a4ade48f9c0867b65cba
- SHA256
  
  0acd992619daac8daca68697e519b7d08b6fba589b539131ab9eb3e48c5a6973
- SHA512
  
  a8a38dbe9ceb7517154e086677463501ab9fde84c4f219cf6644e6335eca3dc59bc7658cc40114624bfb57560d7beeb048a65b853f98b8535df59e111c34b820
- SSDEEP
  
  768:x/nHTvdHlFSGdaOz5lzKiBMZcf8uyXWWcwZ5va/ICf3Ul0L997exIEEchfJ4lgZ:xvpfdz5QiBMZckLXWVo7k687exnEc13Z
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan