0b9bc82f854f5c54c44089800242e6472c3535ed42e6efb25d800b8f54b19f4c | Triage

Sharing

General

Target

0b9bc82f854f5c54c44089800242e6472c3535ed42e6efb25d800b8f54b19f4c
Size

471KB
Sample

191025-krvqvqh7d6
MD5

cd19056271dcab2bd90391b6944a6e93
SHA1

30bc768575d763cb528d6238ac8779352bccaaa4
SHA256

0b9bc82f854f5c54c44089800242e6472c3535ed42e6efb25d800b8f54b19f4c
SHA512

4f9881b90a5aec45d27ff3a989901491e068605374e8bada3e3aa94161ecee718fc0828f7091c33c2b81419be6cb0444adbd4166e89bb9d5eeea861bd96a8eef

Score

7^/10

Malware Config

Targets

- Target
  
  0b9bc82f854f5c54c44089800242e6472c3535ed42e6efb25d800b8f54b19f4c
- Size
  
  471KB
- MD5
  
  cd19056271dcab2bd90391b6944a6e93
- SHA1
  
  30bc768575d763cb528d6238ac8779352bccaaa4
- SHA256
  
  0b9bc82f854f5c54c44089800242e6472c3535ed42e6efb25d800b8f54b19f4c
- SHA512
  
  4f9881b90a5aec45d27ff3a989901491e068605374e8bada3e3aa94161ecee718fc0828f7091c33c2b81419be6cb0444adbd4166e89bb9d5eeea861bd96a8eef
Score

7^/10
- Windows security modification
  evasion trojan
- Modifies system certificate store
  evasion spyware trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2