8a492dcfaead4c531d1d0be16dc2d74a4ee983149d43e70e8a8686888d4ae1e5 | Triage

Sharing

General

Target

8a492dcfaead4c531d1d0be16dc2d74a4ee983149d43e70e8a8686888d4ae1e5
Size

376KB
Sample

221029-aqn4daddg5
MD5

0c45ce2d32347e94e4519d56161d017a
SHA1

a5b7826d1d9c1546b660a166c198ff7e1cd7750d
SHA256

8a492dcfaead4c531d1d0be16dc2d74a4ee983149d43e70e8a8686888d4ae1e5
SHA512

f886cf0bf9305e76fb0a6ec62db6bd081a03e9036569039985d1f85e56bd4a50a492d5bade13657f8bcdae1e7617d79ec02a84db8921a8399b863e61b00fbca9
SSDEEP

6144:eXTlaHARcl7WYR/6TB8qXTlaHARcl7WYR/6TB:ejlHS6TtjlHS6T

Score

7^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8a492dcfaead4c531d1d0be16dc2d74a4ee983149d43e70e8a8686888d4ae1e5
- Size
  
  376KB
- MD5
  
  0c45ce2d32347e94e4519d56161d017a
- SHA1
  
  a5b7826d1d9c1546b660a166c198ff7e1cd7750d
- SHA256
  
  8a492dcfaead4c531d1d0be16dc2d74a4ee983149d43e70e8a8686888d4ae1e5
- SHA512
  
  f886cf0bf9305e76fb0a6ec62db6bd081a03e9036569039985d1f85e56bd4a50a492d5bade13657f8bcdae1e7617d79ec02a84db8921a8399b863e61b00fbca9
- SSDEEP
  
  6144:eXTlaHARcl7WYR/6TB8qXTlaHARcl7WYR/6TB:ejlHS6TtjlHS6T
Score

7^/10

evasion persistence trojan
- Deletes itself
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan