f118e52a73227b85fbb0cb7d202c3753916e518c516286c441a2dc92ede1f023 | Triage

Sharing

General

Target

f118e52a73227b85fbb0cb7d202c3753916e518c516286c441a2dc92ede1f023
Size

1.4MB
Sample

191025-n5946waagx
MD5

4f551cb9a7c7d24104c19ac85e55defe
SHA1

becd31acf5ed0396433b7d836fe0d4c3fae29169
SHA256

f118e52a73227b85fbb0cb7d202c3753916e518c516286c441a2dc92ede1f023
SHA512

801fa55da6c539984da48b8dc695ffc2e4cd7f2e546d72e87b441e13cc26a7122ad40a0367e9c41bb4e91655c739cd6016a440e751dd291e980ecf22e792cc66

Score

8^/10

Malware Config

Targets

- Target
  
  f118e52a73227b85fbb0cb7d202c3753916e518c516286c441a2dc92ede1f023
- Size
  
  1.4MB
- MD5
  
  4f551cb9a7c7d24104c19ac85e55defe
- SHA1
  
  becd31acf5ed0396433b7d836fe0d4c3fae29169
- SHA256
  
  f118e52a73227b85fbb0cb7d202c3753916e518c516286c441a2dc92ede1f023
- SHA512
  
  801fa55da6c539984da48b8dc695ffc2e4cd7f2e546d72e87b441e13cc26a7122ad40a0367e9c41bb4e91655c739cd6016a440e751dd291e980ecf22e792cc66
Score

8^/10
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

task1

task2