ab0e5adbf788b41203ae69739711e9e5edf2d1b685aa9907972e35d787c5f3a5 | Triage

Sharing

General

Target

ab0e5adbf788b41203ae69739711e9e5edf2d1b685aa9907972e35d787c5f3a5
Size

845KB
Sample

221107-qmblwahcg2
MD5

07d27efe9bd39fbd092439a23292b6ed
SHA1

92aeeeb216d056879096f31e7476637c25f05770
SHA256

ab0e5adbf788b41203ae69739711e9e5edf2d1b685aa9907972e35d787c5f3a5
SHA512

afe635b670d406e8e31247aaad5da89418b86309eaa7d053717aabab9d80c7fac00b9507badd5900a2947f82590f5599b07e54de31f1dcf6b3c235562ff4ab63
SSDEEP

24576:qYt0rmeL+c3Ufaz288lpmxkjtSRtUNshDmZagR:qejeyNKZxGUUmAJR

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ab0e5adbf788b41203ae69739711e9e5edf2d1b685aa9907972e35d787c5f3a5
- Size
  
  845KB
- MD5
  
  07d27efe9bd39fbd092439a23292b6ed
- SHA1
  
  92aeeeb216d056879096f31e7476637c25f05770
- SHA256
  
  ab0e5adbf788b41203ae69739711e9e5edf2d1b685aa9907972e35d787c5f3a5
- SHA512
  
  afe635b670d406e8e31247aaad5da89418b86309eaa7d053717aabab9d80c7fac00b9507badd5900a2947f82590f5599b07e54de31f1dcf6b3c235562ff4ab63
- SSDEEP
  
  24576:qYt0rmeL+c3Ufaz288lpmxkjtSRtUNshDmZagR:qejeyNKZxGUUmAJR
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan