548bf8f685146ed7ee17c7a2aef0d62dba7be7aaed575712c5004aa26e83f1b3 | Triage

Sharing

General

Target

Scan_sutl_Signed_.exe
Size

708KB
Sample

200708-y252w4e2bx
MD5

fe581cd6100e9f25ac1b69ca857bda04
SHA1

80f37fdcc737c2df5716469907f744959da7015e
SHA256

548bf8f685146ed7ee17c7a2aef0d62dba7be7aaed575712c5004aa26e83f1b3
SHA512

81a6005648f3fee1adfb5a1f6770dcdb1be6ab7c1315407c234de54f1909f872af9fb6216468f55832646ab864f9a019abd9e1116bd1f0d31220064c88a4490e

Score

8^/10

evasion persistence spyware trojan

Malware Config

Targets

- Target
  
  Scan_sutl_Signed_.exe
- Size
  
  708KB
- MD5
  
  fe581cd6100e9f25ac1b69ca857bda04
- SHA1
  
  80f37fdcc737c2df5716469907f744959da7015e
- SHA256
  
  548bf8f685146ed7ee17c7a2aef0d62dba7be7aaed575712c5004aa26e83f1b3
- SHA512
  
  81a6005648f3fee1adfb5a1f6770dcdb1be6ab7c1315407c234de54f1909f872af9fb6216468f55832646ab864f9a019abd9e1116bd1f0d31220064c88a4490e
Score

8^/10

evasion spyware trojan persistence
- Executes dropped EXE
- Adds Run entry to start application
  persistence
- Modifies system certificate store
  evasion spyware trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywaretrojanpersistence

behavioral2

evasionspywaretrojan