Overview

overview

10

task1

 

10

task2

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Exes_e1d7946e0431423da26d27e7fae00edf.jpg

  • Size

    1.0MB

  • Sample

    190824-szpqtsb8w6

  • MD5

    e1d7946e0431423da26d27e7fae00edf

  • SHA1

    f44ef7a71a8503d169e34fa9f80230b0f6cb36e2

  • SHA256

    d832010182a986629db10bf429f85fe659265360964bee1cbec2947cfc597b00

  • SHA512

    b211ffe1b419dacdfd8d17e4024e9f9eb3a8f384690fca4b8aa4715da28a25532891d666d988cb8aaa0811c1879c04d9ce475029bb3cc9404078c6373d37b9b3

Score
N/A

Malware Config

Targets

    • Target

      Exes_e1d7946e0431423da26d27e7fae00edf.jpg

    • Size

      1.0MB

    • MD5

      e1d7946e0431423da26d27e7fae00edf

    • SHA1

      f44ef7a71a8503d169e34fa9f80230b0f6cb36e2

    • SHA256

      d832010182a986629db10bf429f85fe659265360964bee1cbec2947cfc597b00

    • SHA512

      b211ffe1b419dacdfd8d17e4024e9f9eb3a8f384690fca4b8aa4715da28a25532891d666d988cb8aaa0811c1879c04d9ce475029bb3cc9404078c6373d37b9b3

    Score
    N/A

    • troldesh family

      family

    • Loads dropped DLL

    • Adds Run entry to start application

    task1task2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Execution through Module Load

1
T1129

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Obfuscated Files or Information

1
T1027

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks