SecuriteInfo.com.ArtemisTrojan.29409
General
Target
Size
Sample
SecuriteInfo.com.ArtemisTrojan.29409
1MB
201125-m9haf868je
Score
10 /10
MD5
SHA1
SHA256
SHA512
a46cbc94fc5553868d63469acad6747f
6ca6c3d3fe0b5826c6b3d82144ab745bea2226f7
187cd525a046dd304b15ad47a1f8923546cc97a21afae5a2344cf8cac5c5b550
0151f9a54ce8a023da7e3450973b2a1718dc6b234c5f53f97e2f08fbff3b8c465cebcc1be53503d76b404cf7ee5ce22c56478a261376fa622ae826122d4dd17c
Malware Config
Targets
Target
MD5
Filesize
SecuriteInfo.com.ArtemisTrojan.29409
a46cbc94fc5553868d63469acad6747f
1MB
Score
10 /10
SHA1
SHA256
SHA512
6ca6c3d3fe0b5826c6b3d82144ab745bea2226f7
187cd525a046dd304b15ad47a1f8923546cc97a21afae5a2344cf8cac5c5b550
0151f9a54ce8a023da7e3450973b2a1718dc6b234c5f53f97e2f08fbff3b8c465cebcc1be53503d76b404cf7ee5ce22c56478a261376fa622ae826122d4dd17c
Tags
Signatures
-
UAC bypass
-
Windows security bypass
Tags
TTPs
-
XpertRAT
Description
XpertRAT is a remote access trojan with various capabilities.
Tags
-
XpertRAT Core Payload
-
Adds policy Run key to start application
Tags
TTPs
-
Windows security modification
Tags
TTPs
-
Adds Run key to start application
Tags
TTPs
-
Checks whether UAC is enabled
Tags
TTPs
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks