c0fa4bafe63cc4991daabe00dc7f7e4a6aa7d3326ec64eb94cdef461d6f62f4a | Triage

Sharing

General

Target

c0fa4bafe63cc4991daabe00dc7f7e4a6aa7d3326ec64eb94cdef461d6f62f4a
Size

877KB
Sample

221029-klpt8aacel
MD5

22b1b398d53ed6528ab14d8cace217e4
SHA1

7cfedc744fbb1b11a8591c1137eff62c4a18588c
SHA256

c0fa4bafe63cc4991daabe00dc7f7e4a6aa7d3326ec64eb94cdef461d6f62f4a
SHA512

024194ea41f9c0d3eb39f1d9811450363368b46173d55e9992aebd702a38a63027fc978dc0d6d967ee6f2d0c0cbab7d67ecb7fc2ac42ead2e239f72824a441fc
SSDEEP

24576:sJ2WjW0XXUTH5MN+9eUnvUSKPaYP1fegx5OUks7:cZjW0HeI7UnvUSKyYwyBh7

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  c0fa4bafe63cc4991daabe00dc7f7e4a6aa7d3326ec64eb94cdef461d6f62f4a
- Size
  
  877KB
- MD5
  
  22b1b398d53ed6528ab14d8cace217e4
- SHA1
  
  7cfedc744fbb1b11a8591c1137eff62c4a18588c
- SHA256
  
  c0fa4bafe63cc4991daabe00dc7f7e4a6aa7d3326ec64eb94cdef461d6f62f4a
- SHA512
  
  024194ea41f9c0d3eb39f1d9811450363368b46173d55e9992aebd702a38a63027fc978dc0d6d967ee6f2d0c0cbab7d67ecb7fc2ac42ead2e239f72824a441fc
- SSDEEP
  
  24576:sJ2WjW0XXUTH5MN+9eUnvUSKPaYP1fegx5OUks7:cZjW0HeI7UnvUSKyYwyBh7
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2