Overview

overview

7

task1

 

7

task2

 

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52a64cdbf67e6a97f064dee7e41fbc3779c8efae9e9cc7b95b939f09f876dea5

  • Size

    35KB

  • Sample

    191025-7lnrg7gczs

  • MD5

    15edc367f66ac52c9d4d55e06541ac9d

  • SHA1

    6672cc45a9dcf3a230ac1b0b524c533b1c90879c

  • SHA256

    52a64cdbf67e6a97f064dee7e41fbc3779c8efae9e9cc7b95b939f09f876dea5

  • SHA512

    56af79f016f202174cccdcd5e32139f43248c8465417672a1ac5f9f5aa28f156a536d323c9fa6c951ade78ff6a8c65c8b8c569319b5dc611c031027d476f5ca6

Score
7/10

Malware Config

Targets

    • Target

      52a64cdbf67e6a97f064dee7e41fbc3779c8efae9e9cc7b95b939f09f876dea5

    • Size

      35KB

    • MD5

      15edc367f66ac52c9d4d55e06541ac9d

    • SHA1

      6672cc45a9dcf3a230ac1b0b524c533b1c90879c

    • SHA256

      52a64cdbf67e6a97f064dee7e41fbc3779c8efae9e9cc7b95b939f09f876dea5

    • SHA512

      56af79f016f202174cccdcd5e32139f43248c8465417672a1ac5f9f5aa28f156a536d323c9fa6c951ade78ff6a8c65c8b8c569319b5dc611c031027d476f5ca6

    Score
    7/10

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Checks system information in the registry (likely anti-VM)

    • Modifies service

      persistence
    task1task2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks