691d44f1f451daab03e00257d29f5b5c7ff02533e05fec1abaed1919bb86c7fe | Triage

Sharing

General

Target

691d44f1f451daab03e00257d29f5b5c7ff02533e05fec1abaed1919bb86c7fe
Size

355KB
Sample

221030-dntgvsaab2
MD5

93229e80618b7aca0023765a784f2ea0
SHA1

713f9a389f1792ea83874a05ec82986db8778d76
SHA256

691d44f1f451daab03e00257d29f5b5c7ff02533e05fec1abaed1919bb86c7fe
SHA512

2ab5850a5159e902511b4e97567efb82e43f71d1cb060436b2f9282ede5564a06506c5c62965821ae2d1d5bca0fa7048b1dfefe60168c7c7b60c1cb6999e409f
SSDEEP

6144:emBAzkkQkxLqzh51HC+nWAA0ATthu0Bq7mLeL0av8/qJNfyuAdTYdv9UwjqTMecD:lAzkkQ4miZqig8CNyyqYech

Score

8^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  691d44f1f451daab03e00257d29f5b5c7ff02533e05fec1abaed1919bb86c7fe
- Size
  
  355KB
- MD5
  
  93229e80618b7aca0023765a784f2ea0
- SHA1
  
  713f9a389f1792ea83874a05ec82986db8778d76
- SHA256
  
  691d44f1f451daab03e00257d29f5b5c7ff02533e05fec1abaed1919bb86c7fe
- SHA512
  
  2ab5850a5159e902511b4e97567efb82e43f71d1cb060436b2f9282ede5564a06506c5c62965821ae2d1d5bca0fa7048b1dfefe60168c7c7b60c1cb6999e409f
- SSDEEP
  
  6144:emBAzkkQkxLqzh51HC+nWAA0ATthu0Bq7mLeL0av8/qJNfyuAdTYdv9UwjqTMecD:lAzkkQ4miZqig8CNyyqYech
Score

8^/10

discovery evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2