4052cabc6efdd8910b0c92b973d1a37172a92ee408fc53209d746cfb65e08dcc | Triage

Sharing

General

Target

PO894749745.exe
Size

441KB
Sample

200710-cpardeej72
MD5

65fe80a7288aebb3e14c7db814feb974
SHA1

38df46f7e47abefe45503b57474673e8f5e15c24
SHA256

4052cabc6efdd8910b0c92b973d1a37172a92ee408fc53209d746cfb65e08dcc
SHA512

7415b082c8644f3406c743ab65db55e4e34817d380a6638065ac12547451382a0c51f1c921fa3b07df3eb5aaf75a2eb3cc4cddf2407e044023424c1cb5d64122

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  PO894749745.exe
- Size
  
  441KB
- MD5
  
  65fe80a7288aebb3e14c7db814feb974
- SHA1
  
  38df46f7e47abefe45503b57474673e8f5e15c24
- SHA256
  
  4052cabc6efdd8910b0c92b973d1a37172a92ee408fc53209d746cfb65e08dcc
- SHA512
  
  7415b082c8644f3406c743ab65db55e4e34817d380a6638065ac12547451382a0c51f1c921fa3b07df3eb5aaf75a2eb3cc4cddf2407e044023424c1cb5d64122
Score

7^/10

evasion trojan
- Uses the VBS compiler for execution
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scripting

Persistence

Privilege Escalation

Defense Evasion

Scripting

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2