c6de2ef240cdca97e8d5d6fdcfc7bfd8d5c81a47204d268bd08e4b963d66a64b | Triage

Sharing

General

Target

c6de2ef240cdca97e8d5d6fdcfc7bfd8d5c81a47204d268bd08e4b963d66a64b.dll
Size

364KB
Sample

200709-drvc6yx6c2
MD5

bcfc6be6c9d5e200f1eea88fade628ad
SHA1

9af7baabe0b8d6f140dfef0437e22c7be41011c3
SHA256

c6de2ef240cdca97e8d5d6fdcfc7bfd8d5c81a47204d268bd08e4b963d66a64b
SHA512

d0f404b685d50d1bdfee6d40e8f82fce59a8fad67bd0ba5397bc5db523de58380574512d797f5fcb843ecb6d5758e2049b9cd26927ca46494a6e827fce3ce2b8

Score

8^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  c6de2ef240cdca97e8d5d6fdcfc7bfd8d5c81a47204d268bd08e4b963d66a64b.dll
- Size
  
  364KB
- MD5
  
  bcfc6be6c9d5e200f1eea88fade628ad
- SHA1
  
  9af7baabe0b8d6f140dfef0437e22c7be41011c3
- SHA256
  
  c6de2ef240cdca97e8d5d6fdcfc7bfd8d5c81a47204d268bd08e4b963d66a64b
- SHA512
  
  d0f404b685d50d1bdfee6d40e8f82fce59a8fad67bd0ba5397bc5db523de58380574512d797f5fcb843ecb6d5758e2049b9cd26927ca46494a6e827fce3ce2b8
Score

8^/10

evasion trojan discovery
- Blacklisted process makes network request
- Checks for installed software on the system
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasiontrojandiscovery

behavioral2

evasiontrojandiscovery