48417c1248dfbde668a1118f1d1178ccd0a29612035f25f5724c10a2d6e98fcd | Triage

Sharing

General

Target

48417c1248dfbde668a1118f1d1178ccd0a29612035f25f5724c10a2d6e98fcd
Size

192KB
Sample

191025-63el8xlvr2
MD5

7637e83def3c66546bb4a6ee5e963b03
SHA1

a108e7bc6008a541dfbf0921839a75dd2e2831c5
SHA256

48417c1248dfbde668a1118f1d1178ccd0a29612035f25f5724c10a2d6e98fcd
SHA512

4eda071ff1f0464914ac892b98935c29600ef171b13f4f65ec2ba97261892abf946afb5c29a0c667039b3e0cb9cf8896386e77e1183dc92bbd9715fa4e9ab390

Score

7^/10

Malware Config

Targets

- Target
  
  48417c1248dfbde668a1118f1d1178ccd0a29612035f25f5724c10a2d6e98fcd
- Size
  
  192KB
- MD5
  
  7637e83def3c66546bb4a6ee5e963b03
- SHA1
  
  a108e7bc6008a541dfbf0921839a75dd2e2831c5
- SHA256
  
  48417c1248dfbde668a1118f1d1178ccd0a29612035f25f5724c10a2d6e98fcd
- SHA512
  
  4eda071ff1f0464914ac892b98935c29600ef171b13f4f65ec2ba97261892abf946afb5c29a0c667039b3e0cb9cf8896386e77e1183dc92bbd9715fa4e9ab390
Score

7^/10
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2