b79c78254523935a9d54b7d50e8344f5cc01434810d06d8f31ba7c8a9788af83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b79c78254523935a9d54b7d50e8344f5cc01434810d06d8f31ba7c8a9788af83
Size

104KB
Sample

221106-ranaksgecm
MD5

0e360431aece257caa9d4f0d8c0c0b8b
SHA1

3cea33488be9af0dfb19eb7f094c4e84e393cb8c
SHA256

b79c78254523935a9d54b7d50e8344f5cc01434810d06d8f31ba7c8a9788af83
SHA512

6b9387b559f25bbbfa1f7ca7adb7d82b6dd1a23172b8cfb8b2ce3e032c13be0b50291b0ec216b5b23f5da35c57dab136126045cff6feed43edc0f15141f9b3d5
SSDEEP

768:i7rgnvQjXrDhi8fMsvQl3Wxn6wSRBl7rgnvQjX0Ar5Zi8E5mYru:i7rA6XrosvQRWwwOBl7rA6X0Ar+5mYr

Score

8^/10

evasion trojan

Malware Config

Targets

- Target
  
  b79c78254523935a9d54b7d50e8344f5cc01434810d06d8f31ba7c8a9788af83
- Size
  
  104KB
- MD5
  
  0e360431aece257caa9d4f0d8c0c0b8b
- SHA1
  
  3cea33488be9af0dfb19eb7f094c4e84e393cb8c
- SHA256
  
  b79c78254523935a9d54b7d50e8344f5cc01434810d06d8f31ba7c8a9788af83
- SHA512
  
  6b9387b559f25bbbfa1f7ca7adb7d82b6dd1a23172b8cfb8b2ce3e032c13be0b50291b0ec216b5b23f5da35c57dab136126045cff6feed43edc0f15141f9b3d5
- SSDEEP
  
  768:i7rgnvQjXrDhi8fMsvQl3Wxn6wSRBl7rgnvQjX0Ar5Zi8E5mYru:i7rA6XrosvQRWwwOBl7rA6X0Ar+5mYr
Score

8^/10

evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2