68dc84d960b53cfdd11ed5249cc1e9ca3cad99c68a7eaa39586fd1bf8f7786e0 | Triage

Sharing

General

Target

68dc84d960b53cfdd11ed5249cc1e9ca3cad99c68a7eaa39586fd1bf8f7786e0
Size

1.5MB
Sample

191025-lpyjchfr7x
MD5

8da37d6e63c81de36ddaa2a63332fceb
SHA1

4e769bb39a12bd45e54435fee42a7481fc57957b
SHA256

68dc84d960b53cfdd11ed5249cc1e9ca3cad99c68a7eaa39586fd1bf8f7786e0
SHA512

688185136da9789faf36c0639fb193af9860b1df78fe35e15ad4e93a5e41ebe14d06496d3e12a31a9ecb346a8d4962abdeda07127fff4fc3270817074648c0eb

Score

8^/10

Malware Config

Targets

- Target
  
  68dc84d960b53cfdd11ed5249cc1e9ca3cad99c68a7eaa39586fd1bf8f7786e0
- Size
  
  1.5MB
- MD5
  
  8da37d6e63c81de36ddaa2a63332fceb
- SHA1
  
  4e769bb39a12bd45e54435fee42a7481fc57957b
- SHA256
  
  68dc84d960b53cfdd11ed5249cc1e9ca3cad99c68a7eaa39586fd1bf8f7786e0
- SHA512
  
  688185136da9789faf36c0639fb193af9860b1df78fe35e15ad4e93a5e41ebe14d06496d3e12a31a9ecb346a8d4962abdeda07127fff4fc3270817074648c0eb
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

task1

task2