Overview

overview

8

Static

static

ItroublveTSC.exe

windows7_x64

8

ItroublveTSC.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ItroublveTSC.exe

  • Size

    589KB

  • Sample

    211021-2ydq6aahd3

  • MD5

    6c53267cc0b1e094a5821c0db4b30c63

  • SHA1

    3c1b6b2b68ae1e2525be4dffdceb53dd44632456

  • SHA256

    c91154128e07f0e2254202c4145f0c3b489c537a1795b71e463018f838c348cb

  • SHA512

    ae2a4107014189b6db05b66f243d7ffc8464baa88a538efe5369c8d205038d022a3bc76bcfaab6f985f24bd36afb0b6717d736f32d864178fffd1a4db61619df

Score
8/10
persistence

Malware Config

Targets

    • Target

      ItroublveTSC.exe

    • Size

      589KB

    • MD5

      6c53267cc0b1e094a5821c0db4b30c63

    • SHA1

      3c1b6b2b68ae1e2525be4dffdceb53dd44632456

    • SHA256

      c91154128e07f0e2254202c4145f0c3b489c537a1795b71e463018f838c348cb

    • SHA512

      ae2a4107014189b6db05b66f243d7ffc8464baa88a538efe5369c8d205038d022a3bc76bcfaab6f985f24bd36afb0b6717d736f32d864178fffd1a4db61619df

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks