e23f2e452ca27e821ed6ce386e1e7d5996be52edc1ce678e80ff2aad0edfb30e | Triage

Sharing

General

Target

e23f2e452ca27e821ed6ce386e1e7d5996be52edc1ce678e80ff2aad0edfb30e
Size

406KB
Sample

191025-sa622awaja
MD5

3b8bc9110753815fdcbdb6aecb0f92fa
SHA1

2f3bbf9dbc0957a6fc23bd81c031de78a2fd4940
SHA256

e23f2e452ca27e821ed6ce386e1e7d5996be52edc1ce678e80ff2aad0edfb30e
SHA512

378bce0d121c8c4d15d16c557c2756850143ae25a9c4ad64d25675f43272facdbbcc3d3a1aa6ae53d0cd93988be7fb47238ed3876e9d7fbda8d41a4672046106

Score

7^/10

Malware Config

Targets

- Target
  
  e23f2e452ca27e821ed6ce386e1e7d5996be52edc1ce678e80ff2aad0edfb30e
- Size
  
  406KB
- MD5
  
  3b8bc9110753815fdcbdb6aecb0f92fa
- SHA1
  
  2f3bbf9dbc0957a6fc23bd81c031de78a2fd4940
- SHA256
  
  e23f2e452ca27e821ed6ce386e1e7d5996be52edc1ce678e80ff2aad0edfb30e
- SHA512
  
  378bce0d121c8c4d15d16c557c2756850143ae25a9c4ad64d25675f43272facdbbcc3d3a1aa6ae53d0cd93988be7fb47238ed3876e9d7fbda8d41a4672046106
Score

7^/10
- Windows security modification
  evasion trojan
- Checks system information in the registry (likely anti-VM)
- Modifies service
  persistence
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2