2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c
Size

829KB
Sample

221107-q8aayaadg2
MD5

0d0581a460a3cf637fe8c23c7d37d186
SHA1

6e179f50aebff9e263f25778f3dbeac84c7bcc58
SHA256

2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c
SHA512

3f58f1464b6f77af100292d364e52f744e47c1b4d6a747300f07ad474ffc2a6ca2a5bd1268e04d13efe9aea2014e939a690adefa41442ed8e3d5236ab402902b
SSDEEP

24576:o4bzLIHR5Oug2Z3MpcupcuIc/iEcJ/7sF:hL5oOLcuB/QRsF

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c
- Size
  
  829KB
- MD5
  
  0d0581a460a3cf637fe8c23c7d37d186
- SHA1
  
  6e179f50aebff9e263f25778f3dbeac84c7bcc58
- SHA256
  
  2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c
- SHA512
  
  3f58f1464b6f77af100292d364e52f744e47c1b4d6a747300f07ad474ffc2a6ca2a5bd1268e04d13efe9aea2014e939a690adefa41442ed8e3d5236ab402902b
- SSDEEP
  
  24576:o4bzLIHR5Oug2Z3MpcupcuIc/iEcJ/7sF:hL5oOLcuB/QRsF
Score

10^/10

evasion trojan
- Windows security bypass
  evasion trojan
- Drops file in Drivers directory
- Executes dropped EXE
- Modifies Windows Firewall
  evasion
- Loads dropped DLL
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2