ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce | Triage

Sharing

General

Target

ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce
Size

893KB
Sample

221107-nsv7cseaa7
MD5

12ede310f2741243d64908bdf8d9e7b4
SHA1

13b4411eddaf6a6e5712e74d8486e7bb559348d2
SHA256

ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce
SHA512

26e09b59a5aef9aa934d47dc0c0f4f95b4db5e1e7b50a088b3296cf09bad752ca7fcfc28c95275aef7fe0bcc6c9935f0bf7dbb88fc5d257b1b2cae574ec38d1e
SSDEEP

24576:Z4fTaz+X/CMhIn1n0ibm+Itj/9gTNwei3:Z4fTaz+X/HOniibpst3

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce
- Size
  
  893KB
- MD5
  
  12ede310f2741243d64908bdf8d9e7b4
- SHA1
  
  13b4411eddaf6a6e5712e74d8486e7bb559348d2
- SHA256
  
  ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce
- SHA512
  
  26e09b59a5aef9aa934d47dc0c0f4f95b4db5e1e7b50a088b3296cf09bad752ca7fcfc28c95275aef7fe0bcc6c9935f0bf7dbb88fc5d257b1b2cae574ec38d1e
- SSDEEP
  
  24576:Z4fTaz+X/CMhIn1n0ibm+Itj/9gTNwei3:Z4fTaz+X/HOniibpst3
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2