d01ae3928648a1d4f3d16d2bd86d545b121cec119938cffb04a2e543d98283b6 | Triage

Sharing

General

Target

d01ae3928648a1d4f3d16d2bd86d545b121cec119938cffb04a2e543d98283b6
Size

734KB
Sample

221021-baqgyadhc5
MD5

5b0980fe58acb76e1b89feaa051fea60
SHA1

55e1a8ce8c2742f4ecb69f6e9ca215102b2c72a2
SHA256

d01ae3928648a1d4f3d16d2bd86d545b121cec119938cffb04a2e543d98283b6
SHA512

d0a122cb96fa2f5fd875b5b753fa76205ae2f44142950616b144e9da150ee770462e7762e78a3b7a6c70565d3042599f8ee30271d835a426d4c9d6075e150e8c
SSDEEP

12288:QhC71id9ZwcjRjvWgcDQshlJNO13t1nEmm4SnFoE9/BK5b7IBkU+A4:QhCEZ5jJvWgc1EcJ9gpIE

Score

8^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  d01ae3928648a1d4f3d16d2bd86d545b121cec119938cffb04a2e543d98283b6
- Size
  
  734KB
- MD5
  
  5b0980fe58acb76e1b89feaa051fea60
- SHA1
  
  55e1a8ce8c2742f4ecb69f6e9ca215102b2c72a2
- SHA256
  
  d01ae3928648a1d4f3d16d2bd86d545b121cec119938cffb04a2e543d98283b6
- SHA512
  
  d0a122cb96fa2f5fd875b5b753fa76205ae2f44142950616b144e9da150ee770462e7762e78a3b7a6c70565d3042599f8ee30271d835a426d4c9d6075e150e8c
- SSDEEP
  
  12288:QhC71id9ZwcjRjvWgcDQshlJNO13t1nEmm4SnFoE9/BK5b7IBkU+A4:QhCEZ5jJvWgc1EcJ9gpIE
Score

8^/10

discovery evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan