Overview

overview

10

Static

static

Win32/Back...gC2.7z

windows7_x64

3

Win32/Back...gC2.7z

windows10-2004_x64

10

Resubmissions

24/03/2022, 13:27

220324-qqhvcsecen10

24/03/2022, 13:00

220324-p8slvadhej10

Sharing

Copy URL Twitter E-mail

General

  • Target
    252f1a88526683b9dd18c1a7371533e989578b5118975adf93cd8a0891e3cbef
  • Size 48.1MB
  • Sample220324-qqhvcsecen
  • SHA256 252f1a88526683b9dd18c1a7371533e989578b5118975adf93cd8a0891e3cbef
  • MD5 SHA1 SHA512
Score
10/10
discoverypersistence

Malware Config

Targets

    • Target
      Win32/Backdoor.Win32.APT34.PoisonFrogC2.7z
    • Size 8.8MB
    • SHA256 00d7aa1301eb8fd81297223562b2bdcaaad25413698295cf189508f7be8e5e25
    • MD5 SHA1 SHA512
    Score
    10/10
    discoverypersistence

    • Registers COM server for autorun

      persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks