6c8db88f41c43a13c2dbf6ee8317b0fc6702590c3aac12bdadf7142c524958ac | Triage

Resubmissions

14/10/2024, 08:05

241014-jyw9dssclc 10

29/04/2024, 17:22

240429-vx1qzage2x 10

Sharing

Copy URL Twitter E-mail

General

Target

Winlocker.exe
Size

18KB
Sample

241014-jyw9dssclc
MD5

f17aa8c813d60fc139510070c83228b1
SHA1

0ecf72d2d6d3be23300aa16ceea78d551ca98ebf
SHA256

6c8db88f41c43a13c2dbf6ee8317b0fc6702590c3aac12bdadf7142c524958ac
SHA512

764693c9beace369424297ee65a15535b6bf26465d849d34bf010061e44b8ef9e0fe82fe88dc52bb2b48a6e197f4da5d51c46a768fee992606d794324677adb9
SSDEEP

384:NlFftUnn8BYQ3Lq+IyOLVSf9xKo6kYcV6O7UiJFnh:TFfSPTyOLb8YcV6O4izh

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  Winlocker.exe
- Size
  
  18KB
- MD5
  
  f17aa8c813d60fc139510070c83228b1
- SHA1
  
  0ecf72d2d6d3be23300aa16ceea78d551ca98ebf
- SHA256
  
  6c8db88f41c43a13c2dbf6ee8317b0fc6702590c3aac12bdadf7142c524958ac
- SHA512
  
  764693c9beace369424297ee65a15535b6bf26465d849d34bf010061e44b8ef9e0fe82fe88dc52bb2b48a6e197f4da5d51c46a768fee992606d794324677adb9
- SSDEEP
  
  384:NlFftUnn8BYQ3Lq+IyOLVSf9xKo6kYcV6O7UiJFnh:TFfSPTyOLb8YcV6O4izh
Score

10^/10

discovery evasion persistence trojan
- Modifies WinLogon for persistence
  persistence
- UAC bypass
  evasion trojan
- Disables Task Manager via registry modification
  evasion
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan