993825e7c9ffb2ff11e4d6be55c377ea1ce17f18ab4ea7c28cd4e5243838b67b | Triage

Sharing

General

Target

993825e7c9ffb2ff11e4d6be55c377ea1ce17f18ab4ea7c28cd4e5243838b67b
Size

628KB
Sample

191025-erty84jwqe
MD5

eb3264bfce40531c769bb986683e180e
SHA1

6dbb741212328b868adb0ebfb38ea10035329785
SHA256

993825e7c9ffb2ff11e4d6be55c377ea1ce17f18ab4ea7c28cd4e5243838b67b
SHA512

2ae876b1cfcbb0d9ba2b339dbad461d6bb6bbe606defc61c3715d1b347042229a8d3af88f89f7bb8a0d3f5766b3ded8a4cb4043ca2ee1f9fa93ab754d0f12632

Score

7^/10

Malware Config

Targets

- Target
  
  993825e7c9ffb2ff11e4d6be55c377ea1ce17f18ab4ea7c28cd4e5243838b67b
- Size
  
  628KB
- MD5
  
  eb3264bfce40531c769bb986683e180e
- SHA1
  
  6dbb741212328b868adb0ebfb38ea10035329785
- SHA256
  
  993825e7c9ffb2ff11e4d6be55c377ea1ce17f18ab4ea7c28cd4e5243838b67b
- SHA512
  
  2ae876b1cfcbb0d9ba2b339dbad461d6bb6bbe606defc61c3715d1b347042229a8d3af88f89f7bb8a0d3f5766b3ded8a4cb4043ca2ee1f9fa93ab754d0f12632
Score

7^/10
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

task1

task2