59770ba956ec114265909d9fe97546052c7c7c322e58228e3de2341629ff3c5d | Triage

Sharing

General

Target

59770ba956ec114265909d9fe97546052c7c7c322e58228e3de2341629ff3c5d
Size

1.8MB
Sample

191025-3a5e1pmfkx
MD5

a03243ee7c40761c9e69d24923a27bf7
SHA1

b2c45e000d81c8c7f0dff8e3432d8a452df51e74
SHA256

59770ba956ec114265909d9fe97546052c7c7c322e58228e3de2341629ff3c5d
SHA512

be7494aeb8da845c15be97f0088e4765359471619ec4ffc1e3cecfa2ffbd9e8b6311e53a642f74b878cb85ff60b1a77fb9c99de98fd02ab626c51f41542316b0

Score

8^/10

Malware Config

Targets

- Target
  
  59770ba956ec114265909d9fe97546052c7c7c322e58228e3de2341629ff3c5d
- Size
  
  1.8MB
- MD5
  
  a03243ee7c40761c9e69d24923a27bf7
- SHA1
  
  b2c45e000d81c8c7f0dff8e3432d8a452df51e74
- SHA256
  
  59770ba956ec114265909d9fe97546052c7c7c322e58228e3de2341629ff3c5d
- SHA512
  
  be7494aeb8da845c15be97f0088e4765359471619ec4ffc1e3cecfa2ffbd9e8b6311e53a642f74b878cb85ff60b1a77fb9c99de98fd02ab626c51f41542316b0
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2