a1514a3b50a231adaaf663132ff465188b312b8756b91494fb08b5a413e99ffe | Triage

Sharing

General

Target

a1514a3b50a231adaaf663132ff465188b312b8756b91494fb08b5a413e99ffe
Size

1.0MB
Sample

191025-es4ws6h63n
MD5

7cec97048781b14cda1b9f69715dc281
SHA1

690012d802dc1d1651db4ef589d0126e0f5b5e02
SHA256

a1514a3b50a231adaaf663132ff465188b312b8756b91494fb08b5a413e99ffe
SHA512

b8320588d0f087eaa94c2fe0998bf76f02d776ab98eec52d036ff1aef6b6d33b659ef947647fa48d30c0fdc8ea1570177ba93b33e1db278874d4c182a2d74dc1

Score

7^/10

Malware Config

Targets

- Target
  
  a1514a3b50a231adaaf663132ff465188b312b8756b91494fb08b5a413e99ffe
- Size
  
  1.0MB
- MD5
  
  7cec97048781b14cda1b9f69715dc281
- SHA1
  
  690012d802dc1d1651db4ef589d0126e0f5b5e02
- SHA256
  
  a1514a3b50a231adaaf663132ff465188b312b8756b91494fb08b5a413e99ffe
- SHA512
  
  b8320588d0f087eaa94c2fe0998bf76f02d776ab98eec52d036ff1aef6b6d33b659ef947647fa48d30c0fdc8ea1570177ba93b33e1db278874d4c182a2d74dc1
Score

7^/10
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

task1

task2