69b5938df875b1cc5879e0a8fbcff35ddd6a4a72448f65f5a60e4782bc386322 | Triage

Sharing

General

Target

69b5938df875b1cc5879e0a8fbcff35ddd6a4a72448f65f5a60e4782bc386322
Size

377KB
Sample

191025-b5ev5jw2le
MD5

cd822eb16f9abd498d2f045286771ea7
SHA1

cc358cc24c6bf545474ca9a20d083c49bbb1cf83
SHA256

69b5938df875b1cc5879e0a8fbcff35ddd6a4a72448f65f5a60e4782bc386322
SHA512

36c2f3a0ac4d54e9b9c65ab7c306c3bdfa3ff56804e6abc19db0cb41d6423bb35383bc6afe47ca3d4b065d8085fcdfa8ed877918a43faded19789b09740969ec

Score

7^/10

Malware Config

Targets

- Target
  
  69b5938df875b1cc5879e0a8fbcff35ddd6a4a72448f65f5a60e4782bc386322
- Size
  
  377KB
- MD5
  
  cd822eb16f9abd498d2f045286771ea7
- SHA1
  
  cc358cc24c6bf545474ca9a20d083c49bbb1cf83
- SHA256
  
  69b5938df875b1cc5879e0a8fbcff35ddd6a4a72448f65f5a60e4782bc386322
- SHA512
  
  36c2f3a0ac4d54e9b9c65ab7c306c3bdfa3ff56804e6abc19db0cb41d6423bb35383bc6afe47ca3d4b065d8085fcdfa8ed877918a43faded19789b09740969ec
Score

7^/10
- Drops startup file
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Drops Office document
  dropper exploiter maldoc
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2