ab4c44459535b509ea8c7e78d7aa7ae187812253a637558a33497b0c5a32fd04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab4c44459535b509ea8c7e78d7aa7ae187812253a637558a33497b0c5a32fd04
Size

795KB
Sample

221107-m9nceafdak
MD5

34a85c673f64f39d3694790415d081ce
SHA1

934fffeb713021eb9e9ca21d388c98bc80c6eb90
SHA256

ab4c44459535b509ea8c7e78d7aa7ae187812253a637558a33497b0c5a32fd04
SHA512

6b822dd6524702c87b4c39b12662e721ba8d57655a831f87aa7c1fcf9581367122938da3019fef73db812aed956a9074abee2fa316385ea568ee34e112c8fad5
SSDEEP

24576:DkWWGcSbQG3X4xcLAwKJWOa4HMyNegrllKm:DkW6Sb1X4CLAwn4HM+rlkm

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ab4c44459535b509ea8c7e78d7aa7ae187812253a637558a33497b0c5a32fd04
- Size
  
  795KB
- MD5
  
  34a85c673f64f39d3694790415d081ce
- SHA1
  
  934fffeb713021eb9e9ca21d388c98bc80c6eb90
- SHA256
  
  ab4c44459535b509ea8c7e78d7aa7ae187812253a637558a33497b0c5a32fd04
- SHA512
  
  6b822dd6524702c87b4c39b12662e721ba8d57655a831f87aa7c1fcf9581367122938da3019fef73db812aed956a9074abee2fa316385ea568ee34e112c8fad5
- SSDEEP
  
  24576:DkWWGcSbQG3X4xcLAwKJWOa4HMyNegrllKm:DkW6Sb1X4CLAwn4HM+rlkm
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan