393a3b0187146025433fbbebeaa27fce19c8e7f6082ef60ff23598702a6298d4 | Triage

Sharing

General

Target

393a3b0187146025433fbbebeaa27fce19c8e7f6082ef60ff23598702a6298d4.xlsx
Size

84KB
Sample

200714-ljx1pl1een
MD5

73a84057c69f86796e9db810b5e2d7b0
SHA1

e5ff9786a732cc22ecf51696933648f11162c445
SHA256

393a3b0187146025433fbbebeaa27fce19c8e7f6082ef60ff23598702a6298d4
SHA512

1efd8562c4eb925f90703fcb722e504929b8a8c6deb5d69cf6efd70be814005d21331eac2c3680fd68ea8b1c2df07599dfc1376dd8e5aa52e35945db2be7826c

Score

8^/10

evasion spyware trojan

Malware Config

Targets

- Target
  
  393a3b0187146025433fbbebeaa27fce19c8e7f6082ef60ff23598702a6298d4.xlsx
- Size
  
  84KB
- MD5
  
  73a84057c69f86796e9db810b5e2d7b0
- SHA1
  
  e5ff9786a732cc22ecf51696933648f11162c445
- SHA256
  
  393a3b0187146025433fbbebeaa27fce19c8e7f6082ef60ff23598702a6298d4
- SHA512
  
  1efd8562c4eb925f90703fcb722e504929b8a8c6deb5d69cf6efd70be814005d21331eac2c3680fd68ea8b1c2df07599dfc1376dd8e5aa52e35945db2be7826c
Score

8^/10

evasion spyware trojan
- Blacklisted process makes network request
- Modifies system certificate store
  evasion spyware trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Exploitation for Client Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywaretrojan

behavioral2