f941dd6949d9d8c2c997ce4c78906f97a96f6fbcbead90e71ff4bb8876866d92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f941dd6949d9d8c2c997ce4c78906f97a96f6fbcbead90e71ff4bb8876866d92
Size

72KB
Sample

240601-f3wlwabc9w
MD5

a239d609d74a3e48a34a87f9b0cd1d74
SHA1

9b1d465e31282fe56276d2d216a077fda0b0853f
SHA256

f941dd6949d9d8c2c997ce4c78906f97a96f6fbcbead90e71ff4bb8876866d92
SHA512

4a7725a35d9dfff9e4aacfb633960eb169e08b07f6d4ed62de7a88204d238438d888c26ad7b756621389aca966c51bcbd902f712c456d9dd181b3680040afb7d
SSDEEP

1536:xU9NVM6oqQg9lOkOYmxCibH6n2VY7WMez2/:e9NVDvlOrjxH6IYKMe2

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  f941dd6949d9d8c2c997ce4c78906f97a96f6fbcbead90e71ff4bb8876866d92
- Size
  
  72KB
- MD5
  
  a239d609d74a3e48a34a87f9b0cd1d74
- SHA1
  
  9b1d465e31282fe56276d2d216a077fda0b0853f
- SHA256
  
  f941dd6949d9d8c2c997ce4c78906f97a96f6fbcbead90e71ff4bb8876866d92
- SHA512
  
  4a7725a35d9dfff9e4aacfb633960eb169e08b07f6d4ed62de7a88204d238438d888c26ad7b756621389aca966c51bcbd902f712c456d9dd181b3680040afb7d
- SSDEEP
  
  1536:xU9NVM6oqQg9lOkOYmxCibH6n2VY7WMez2/:e9NVDvlOrjxH6IYKMe2
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan