ab072a6e3c15cd421d6d72911ec03e8dda63ab61f5ff3f6e12ad8a996694e2f1 | Triage

Sharing

General

Target

ab072a6e3c15cd421d6d72911ec03e8dda63ab61f5ff3f6e12ad8a996694e2f1
Size

813KB
Sample

221107-qx977acccq
MD5

1029121a2a35a981b47a6db7a410d2a4
SHA1

65cc9aa2539b05c8d229b8900869c1a895e2b6b0
SHA256

ab072a6e3c15cd421d6d72911ec03e8dda63ab61f5ff3f6e12ad8a996694e2f1
SHA512

c6e705941667d33ddddd5be1404a852e64bfb141f21ea473f5cb3c1046dc4b678f84fd822a2988dc1cb9ecd921c98d27eba013e49a2ee5911a358d91f074a2a7
SSDEEP

24576:zDZjop5YiI1h8jD/dhHIutrLSjhBhiOI25C2oSI9:zDZEp5/I1ijD1FIuFSHUO9C2I9

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ab072a6e3c15cd421d6d72911ec03e8dda63ab61f5ff3f6e12ad8a996694e2f1
- Size
  
  813KB
- MD5
  
  1029121a2a35a981b47a6db7a410d2a4
- SHA1
  
  65cc9aa2539b05c8d229b8900869c1a895e2b6b0
- SHA256
  
  ab072a6e3c15cd421d6d72911ec03e8dda63ab61f5ff3f6e12ad8a996694e2f1
- SHA512
  
  c6e705941667d33ddddd5be1404a852e64bfb141f21ea473f5cb3c1046dc4b678f84fd822a2988dc1cb9ecd921c98d27eba013e49a2ee5911a358d91f074a2a7
- SSDEEP
  
  24576:zDZjop5YiI1h8jD/dhHIutrLSjhBhiOI25C2oSI9:zDZEp5/I1ijD1FIuFSHUO9C2I9
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan