ab3c14b8a7e7ff400cbc35551ef7761dc8c2fab359c480a825a921f8ecd5b072 | Triage

Sharing

General

Target

ab3c14b8a7e7ff400cbc35551ef7761dc8c2fab359c480a825a921f8ecd5b072
Size

809KB
Sample

221107-nxd4msgfap
MD5

2388cb34e7b2b482ede184b5db8e95e0
SHA1

83d8b0ce253d682d118cc33d48062c11cfc8aea2
SHA256

ab3c14b8a7e7ff400cbc35551ef7761dc8c2fab359c480a825a921f8ecd5b072
SHA512

3dffa5c30dc1850339c9a294c84b8b12d80370f81b7d5b5fb67b93e60ae82c36c478fe13f36c1db229e4db8f80cc28e26f017b526a6678b0f915cf5bab2b4234
SSDEEP

24576:f2JQ35eRYwZkW7ZD9o31UYVoK0unTv1TLSG54sNjfNPeu732p:13yKW831IXunTtT3jFPeuD2p

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ab3c14b8a7e7ff400cbc35551ef7761dc8c2fab359c480a825a921f8ecd5b072
- Size
  
  809KB
- MD5
  
  2388cb34e7b2b482ede184b5db8e95e0
- SHA1
  
  83d8b0ce253d682d118cc33d48062c11cfc8aea2
- SHA256
  
  ab3c14b8a7e7ff400cbc35551ef7761dc8c2fab359c480a825a921f8ecd5b072
- SHA512
  
  3dffa5c30dc1850339c9a294c84b8b12d80370f81b7d5b5fb67b93e60ae82c36c478fe13f36c1db229e4db8f80cc28e26f017b526a6678b0f915cf5bab2b4234
- SSDEEP
  
  24576:f2JQ35eRYwZkW7ZD9o31UYVoK0unTv1TLSG54sNjfNPeu732p:13yKW831IXunTtT3jFPeuD2p
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan