2ee68069c79304ab2bc383e02c7d9f07ecdc9f91e9680afe381c72715225a89e

Resubmissions

05/08/2020, 10:38

200805-r64cvtfmje10

28/07/2020, 21:47

200728-2p6wtzg4sj8

Sharing

Copy URL Twitter E-mail

General

Target
lista de noi comenzi.exe
Size 1.4MB
Sample200728-2p6wtzg4sj
SHA256 2ee68069c79304ab2bc383e02c7d9f07ecdc9f91e9680afe381c72715225a89e
MD5 688b7416a90b3c3b4278926a403dc1fc
SHA1 8af9ed06aa4e8a66cfd1a138d5bb826ad1692308
SHA512 b9cfc28386239e3c2a5c0a9d22a5150b3ca6716ace8c4ec41a89d9ab7bacd97849152df7239c88f2c09b3a36fb2c60fd1d7ea594726a6ee5cb1a0c3071813994
MD5 SHA1 SHA512

Score

8^/10

Malware Config

Targets

- Target
  lista de noi comenzi.exe
- Size 1.4MB
- SHA256 2ee68069c79304ab2bc383e02c7d9f07ecdc9f91e9680afe381c72715225a89e
- MD5 688b7416a90b3c3b4278926a403dc1fc
- SHA1 8af9ed06aa4e8a66cfd1a138d5bb826ad1692308
- SHA512 b9cfc28386239e3c2a5c0a9d22a5150b3ca6716ace8c4ec41a89d9ab7bacd97849152df7239c88f2c09b3a36fb2c60fd1d7ea594726a6ee5cb1a0c3071813994
- MD5 SHA1 SHA512
Score

8^/10

persistence spyware evasion trojan
- Adds policy Run key to start application
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Credentials in Files

T1081

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Adds policy Run key to start application

Reads user/profile data of web browsers

Adds Run key to start application

Checks whether UAC is enabled

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2