2132fc40f421685b1627ce2c180f91351f4fb36b75ede1b62472d5e2b9fcc796 | Triage

Sharing

General

Target

2132fc40f421685b1627ce2c180f91351f4fb36b75ede1b62472d5e2b9fcc796
Size

53KB
Sample

220612-laxalabce7
MD5

754d52097098dab5be299e2471ddbcd8
SHA1

c810db7af4923cf718f05e22e2fa9240c39b13dd
SHA256

2132fc40f421685b1627ce2c180f91351f4fb36b75ede1b62472d5e2b9fcc796
SHA512

43ba692fd95b285f4bd0b9ce2c32b71b5a063718f185a2bdb04f939f4213c1842d5dc217acb2bfcc4d76f155cd86d22e7926891459fa7647353557eb08c09bf3

Score

6^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  KeyGen.exe
- Size
  
  43KB
- MD5
  
  8a53bfccbe4fc856c128c4be1443b33d
- SHA1
  
  1015eb416e817c4c22ebfeb663f3bd7cc9c78b48
- SHA256
  
  6717ceb78fbf06e14fd4f6637b226021f50508ae22fdf6c2e82a4664cce558e4
- SHA512
  
  dc5b18b7ab4927f9357cca64d4748c65d7f812b5389dfff82609723e9ee8d24a4cb4778e9d2511e60b917a3662111b8dbc8f09adbdc3212eb7387794edb4219a
Score

1^/10
behavioral1 behavioral2
- Target
  
  keygen.us.url
- Size
  
  71B
- MD5
  
  50f22b7f3082c257ce8518314c0d78ea
- SHA1
  
  ce9d311110e8216cdc90d76a61649b58d151935c
- SHA256
  
  416298fcb9afd5be5466439879cee4e3aeb0a013c22949871f93e5975007336f
- SHA512
  
  8f1d375885a4a28b250e493540003ab4f99df9fe0808e52ad1ad43eb4a72897c091bb40d9096819b2506ac9a50188c9b2f52b93b9171fd833bc221b28fbfecec
Score

6^/10

evasion trojan persistence
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4