ab96b4ea23a6d2ef8b756423f51d1805d5ec633e8eff7f694e3371ec7728a397 | Triage

Sharing

General

Target

ab96b4ea23a6d2ef8b756423f51d1805d5ec633e8eff7f694e3371ec7728a397
Size

807KB
Sample

221107-j8g78afga4
MD5

2412da83446101710291d39b2204f3de
SHA1

248c12f372adcc93cb292d5b7b4c8907a6eb81a0
SHA256

ab96b4ea23a6d2ef8b756423f51d1805d5ec633e8eff7f694e3371ec7728a397
SHA512

f423f4177fef5e7688a4070ceacb5bdd763d07434d820fd0e80ff997be3200258fddccf9331e723f040b89f581741592979a833fec5434e8e28244af64015849
SSDEEP

24576:XSvkvoX9d2LS8/SL7xq9SioC7ry+dYAs5Gip:XR8WLj/S/xq9SjC7ry+dYA0p

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ab96b4ea23a6d2ef8b756423f51d1805d5ec633e8eff7f694e3371ec7728a397
- Size
  
  807KB
- MD5
  
  2412da83446101710291d39b2204f3de
- SHA1
  
  248c12f372adcc93cb292d5b7b4c8907a6eb81a0
- SHA256
  
  ab96b4ea23a6d2ef8b756423f51d1805d5ec633e8eff7f694e3371ec7728a397
- SHA512
  
  f423f4177fef5e7688a4070ceacb5bdd763d07434d820fd0e80ff997be3200258fddccf9331e723f040b89f581741592979a833fec5434e8e28244af64015849
- SSDEEP
  
  24576:XSvkvoX9d2LS8/SL7xq9SioC7ry+dYAs5Gip:XR8WLj/S/xq9SjC7ry+dYA0p
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan