fd7c6aa7eb235d7b89c06dce9c5ab4572d7ae5891d0c0a2ccbaa74033359913d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd7c6aa7eb235d7b89c06dce9c5ab4572d7ae5891d0c0a2ccbaa74033359913d
Size

525KB
Sample

221011-l7fdcahfdr
MD5

12eed6dcc5d7754d9f16868e114b8290
SHA1

5fb0e39bbfa3a1ee8162435750afaa1455c3b53e
SHA256

fd7c6aa7eb235d7b89c06dce9c5ab4572d7ae5891d0c0a2ccbaa74033359913d
SHA512

29192af0196c016ece7fd6203845b5557e4521ca29719cbf588e719b00ec9b558202c0c5f28b184f09cdf6e5adc44ec3b8a916b5688df909b8ce180b69fe59e8
SSDEEP

12288:3MqbgTrV1IAQVebJm9TToB3vHEJul/s62tP3zBQGWbCjp4:3M2zAm9TsBVl/v25qLbB

Score

8^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  fd7c6aa7eb235d7b89c06dce9c5ab4572d7ae5891d0c0a2ccbaa74033359913d
- Size
  
  525KB
- MD5
  
  12eed6dcc5d7754d9f16868e114b8290
- SHA1
  
  5fb0e39bbfa3a1ee8162435750afaa1455c3b53e
- SHA256
  
  fd7c6aa7eb235d7b89c06dce9c5ab4572d7ae5891d0c0a2ccbaa74033359913d
- SHA512
  
  29192af0196c016ece7fd6203845b5557e4521ca29719cbf588e719b00ec9b558202c0c5f28b184f09cdf6e5adc44ec3b8a916b5688df909b8ce180b69fe59e8
- SSDEEP
  
  12288:3MqbgTrV1IAQVebJm9TToB3vHEJul/s62tP3zBQGWbCjp4:3M2zAm9TsBVl/v25qLbB
Score

8^/10

discovery evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2