0c8c5f08a6c584aaa9d1d329f8cd93d30112a5e124ca778665295672fa9575fd | Triage

Sharing

General

Target

Exes_0e990c245caea198c74baf6d9a5172c3.1
Size

1.3MB
Sample

190824-p4fetn3r76
MD5

0e990c245caea198c74baf6d9a5172c3
SHA1

db74ac790891b9139c15dc158298b18864eb7ead
SHA256

0c8c5f08a6c584aaa9d1d329f8cd93d30112a5e124ca778665295672fa9575fd
SHA512

913dfed57f4dff9b6c19bb15c3e6920ac40afc64a808499d3fc1c204fe2d23b0963d8d66e5e490ce0d89644bbd925cb849f952f236502646195cdac6af013e58

Score

N/A

Malware Config

Targets

- Target
  
  Exes_0e990c245caea198c74baf6d9a5172c3.1
- Size
  
  1.3MB
- MD5
  
  0e990c245caea198c74baf6d9a5172c3
- SHA1
  
  db74ac790891b9139c15dc158298b18864eb7ead
- SHA256
  
  0c8c5f08a6c584aaa9d1d329f8cd93d30112a5e124ca778665295672fa9575fd
- SHA512
  
  913dfed57f4dff9b6c19bb15c3e6920ac40afc64a808499d3fc1c204fe2d23b0963d8d66e5e490ce0d89644bbd925cb849f952f236502646195cdac6af013e58
Score

N/A
- troldesh family
  family
- Loads dropped DLL
- Adds Run entry to start application
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Execution through Module Load

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Obfuscated Files or Information

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2