ca43ab2e8bafe6c3051bec7b1412e3580109c2049746d088022cfb0b808c4f13 | Triage

Sharing

General

Target

ca43ab2e8bafe6c3051bec7b1412e3580109c2049746d088022cfb0b808c4f13
Size

952KB
Sample

191025-qw2x9q76qj
MD5

a0cc7a9bb8dda36066c48463539397f9
SHA1

37040af9b8fc1ccfe970e77d765b04a8f2dc1744
SHA256

ca43ab2e8bafe6c3051bec7b1412e3580109c2049746d088022cfb0b808c4f13
SHA512

f68b092809eb0e6de3c97d2be59c4bed9ad80a4d4f90af2b865891468d5ee0f9696151957ad91be155789aed685bc1a5aa9deec0226fb1a7fd36431b9a1cf030

Score

7^/10

Malware Config

Targets

- Target
  
  ca43ab2e8bafe6c3051bec7b1412e3580109c2049746d088022cfb0b808c4f13
- Size
  
  952KB
- MD5
  
  a0cc7a9bb8dda36066c48463539397f9
- SHA1
  
  37040af9b8fc1ccfe970e77d765b04a8f2dc1744
- SHA256
  
  ca43ab2e8bafe6c3051bec7b1412e3580109c2049746d088022cfb0b808c4f13
- SHA512
  
  f68b092809eb0e6de3c97d2be59c4bed9ad80a4d4f90af2b865891468d5ee0f9696151957ad91be155789aed685bc1a5aa9deec0226fb1a7fd36431b9a1cf030
Score

7^/10
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

task1

task2