3982e1c194f864fd8328e9d0511f534b237f78430f282464c0ac0744e9dc5d32 | Triage

Sharing

General

Target

3982e1c194f864fd8328e9d0511f534b237f78430f282464c0ac0744e9dc5d32
Size

968KB
Sample

191025-41an2mxbra
MD5

c6ec38200518618531cd5df1adceed7d
SHA1

a0c3a7f1ad10f5a6f1a22c2f87cca061ffae3651
SHA256

3982e1c194f864fd8328e9d0511f534b237f78430f282464c0ac0744e9dc5d32
SHA512

4c16fd5e988431cb5f525b94c4db87e303df05d65c2811a0de717132487c3abf60f34938b87d9277b25a8dff5962605863373c906930847a44b372e72128b6b8

Score

7^/10

Malware Config

Targets

- Target
  
  3982e1c194f864fd8328e9d0511f534b237f78430f282464c0ac0744e9dc5d32
- Size
  
  968KB
- MD5
  
  c6ec38200518618531cd5df1adceed7d
- SHA1
  
  a0c3a7f1ad10f5a6f1a22c2f87cca061ffae3651
- SHA256
  
  3982e1c194f864fd8328e9d0511f534b237f78430f282464c0ac0744e9dc5d32
- SHA512
  
  4c16fd5e988431cb5f525b94c4db87e303df05d65c2811a0de717132487c3abf60f34938b87d9277b25a8dff5962605863373c906930847a44b372e72128b6b8
Score

7^/10
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2