ab424b5150b90b8d06a02a0bb440fd2e76545b1d0942f98eaa1c227fd91689ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab424b5150b90b8d06a02a0bb440fd2e76545b1d0942f98eaa1c227fd91689ef
Size

840KB
Sample

221107-nnt4hadgb5
MD5

426c1d91557ae6e0206a9753ae309b54
SHA1

a62a55d3315dcef858db0e8c1b9111451fbcd24f
SHA256

ab424b5150b90b8d06a02a0bb440fd2e76545b1d0942f98eaa1c227fd91689ef
SHA512

2baa9ba6482d726298555f5a8e3382f7ed7ddd8221f15d9fac8973d57bdac5858468dd21afc9b5a3bd5cb24e55b74bc6700d49fc42a05557dba4c795755b7f62
SSDEEP

24576:g5WHdKCmapuwtdDSQMgkp20Xt4Gr9yknW:g5MuGqgkp20X+GJyMW

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ab424b5150b90b8d06a02a0bb440fd2e76545b1d0942f98eaa1c227fd91689ef
- Size
  
  840KB
- MD5
  
  426c1d91557ae6e0206a9753ae309b54
- SHA1
  
  a62a55d3315dcef858db0e8c1b9111451fbcd24f
- SHA256
  
  ab424b5150b90b8d06a02a0bb440fd2e76545b1d0942f98eaa1c227fd91689ef
- SHA512
  
  2baa9ba6482d726298555f5a8e3382f7ed7ddd8221f15d9fac8973d57bdac5858468dd21afc9b5a3bd5cb24e55b74bc6700d49fc42a05557dba4c795755b7f62
- SSDEEP
  
  24576:g5WHdKCmapuwtdDSQMgkp20Xt4Gr9yknW:g5MuGqgkp20X+GJyMW
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan