433bae3045c110790a9ba2a11bbbc39f5fd10a36c0422bcd6e706b0eedbba66b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

433bae3045c110790a9ba2a11bbbc39f5fd10a36c0422bcd6e706b0eedbba66b
Size

800KB
Sample

191025-ngfytphg2x
MD5

c35736429b30030acb60cb19c771649e
SHA1

e45a11358fa376cc0dcf103e431aa3ea805370f0
SHA256

433bae3045c110790a9ba2a11bbbc39f5fd10a36c0422bcd6e706b0eedbba66b
SHA512

7e664ca187045a9dc1fbf432ad13f322fa33db7de15481c7bef9b6fe1ae59804ce396c5e1d40d15f8eb4c921bec3cab12336491882656927fa38897afd002b16

Score

7^/10

Malware Config

Targets

- Target
  
  433bae3045c110790a9ba2a11bbbc39f5fd10a36c0422bcd6e706b0eedbba66b
- Size
  
  800KB
- MD5
  
  c35736429b30030acb60cb19c771649e
- SHA1
  
  e45a11358fa376cc0dcf103e431aa3ea805370f0
- SHA256
  
  433bae3045c110790a9ba2a11bbbc39f5fd10a36c0422bcd6e706b0eedbba66b
- SHA512
  
  7e664ca187045a9dc1fbf432ad13f322fa33db7de15481c7bef9b6fe1ae59804ce396c5e1d40d15f8eb4c921bec3cab12336491882656927fa38897afd002b16
Score

7^/10
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2