Overview

overview

8

Static

static

8

remote (2).exe

windows7_x64

7

remote (2).exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    remote (2).exe

  • Size

    7.1MB

  • Sample

    210113-qepj18vt7a

  • MD5

    29019ced86eb160aa754828649703769

  • SHA1

    b1689f923228f42da1f9eff5709d797153fb81c1

  • SHA256

    575cd45bc66b57679f2b565270c84c957bf68a8ab84833845a038aad87b7bfb0

  • SHA512

    8dcff0d47180c38a0781d7fd8a01073bcaad3edf2c69654a15e9c8a8d2873071ae5bea5261e58ca2650f775243978f01e2a8d62e84319f2f88422de7d033a247

Score
8/10
evasiontrojanupx

Malware Config

Targets

    • Target

      remote (2).exe

    • Size

      7.1MB

    • MD5

      29019ced86eb160aa754828649703769

    • SHA1

      b1689f923228f42da1f9eff5709d797153fb81c1

    • SHA256

      575cd45bc66b57679f2b565270c84c957bf68a8ab84833845a038aad87b7bfb0

    • SHA512

      8dcff0d47180c38a0781d7fd8a01073bcaad3edf2c69654a15e9c8a8d2873071ae5bea5261e58ca2650f775243978f01e2a8d62e84319f2f88422de7d033a247

    Score
    7/10
    evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks whether UAC is enabled

      evasiontrojan

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks