92ff4894e56b666235c1433b0cc2e7256b8331317a4cecf3e27bf58e081d0cdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Password.txt.lnk
Size

2KB
Sample

200708-pgz3h5ctd2
MD5

76ec46ffc28bdd4337588fbe0e826b39
SHA1

2cc675defde1949a156da1d3f19c1249cf7cb170
SHA256

92ff4894e56b666235c1433b0cc2e7256b8331317a4cecf3e27bf58e081d0cdd
SHA512

69958e7e1e47cb93301bb67200edc55e7f108bf8fd191ab9ffa9e3f20ded04aea3aace9a60c23952f118408be57648d04e0d922b143c8d2f93b4b32fca09c566

Score

8^/10

evasion spyware trojan

Malware Config

Targets

- Target
  
  Password.txt.lnk
- Size
  
  2KB
- MD5
  
  76ec46ffc28bdd4337588fbe0e826b39
- SHA1
  
  2cc675defde1949a156da1d3f19c1249cf7cb170
- SHA256
  
  92ff4894e56b666235c1433b0cc2e7256b8331317a4cecf3e27bf58e081d0cdd
- SHA512
  
  69958e7e1e47cb93301bb67200edc55e7f108bf8fd191ab9ffa9e3f20ded04aea3aace9a60c23952f118408be57648d04e0d922b143c8d2f93b4b32fca09c566
Score

8^/10

evasion spyware trojan
- Blacklisted process makes network request
- Modifies system certificate store
  evasion spyware trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywaretrojan