02cfe8ad9476d2a7fbfe6f3cd6dc3718184d536ecb66e3e1e53cf3b54da42dcc | Triage

Sharing

General

Target

02cfe8ad9476d2a7fbfe6f3cd6dc3718184d536ecb66e3e1e53cf3b54da42dcc
Size

833KB
Sample

221123-3v4c3sdd24
MD5

dac17f6564cf1c452ec4c55023295c46
SHA1

9a7c90366af4e93d510735b67abb0e05032a8ab1
SHA256

02cfe8ad9476d2a7fbfe6f3cd6dc3718184d536ecb66e3e1e53cf3b54da42dcc
SHA512

7fef15ae1ed98c8e4be0674c21e22900a4ef26a1ca201360a3c51af4bc52d98f28b7f19b7d883baf1e25e9971978fc9280a64322b9f551d927d36edb26f87e74
SSDEEP

12288:Un1FfSR/3yS8IZ0Raz8k2l21I1Yw0q5uypkPDBPCDuxg7IaxOdYzWaO3PGRvKAFa:UnjfMT2ESnUJrCwYjwDaO32vLStDs4t

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  02cfe8ad9476d2a7fbfe6f3cd6dc3718184d536ecb66e3e1e53cf3b54da42dcc
- Size
  
  833KB
- MD5
  
  dac17f6564cf1c452ec4c55023295c46
- SHA1
  
  9a7c90366af4e93d510735b67abb0e05032a8ab1
- SHA256
  
  02cfe8ad9476d2a7fbfe6f3cd6dc3718184d536ecb66e3e1e53cf3b54da42dcc
- SHA512
  
  7fef15ae1ed98c8e4be0674c21e22900a4ef26a1ca201360a3c51af4bc52d98f28b7f19b7d883baf1e25e9971978fc9280a64322b9f551d927d36edb26f87e74
- SSDEEP
  
  12288:Un1FfSR/3yS8IZ0Raz8k2l21I1Yw0q5uypkPDBPCDuxg7IaxOdYzWaO3PGRvKAFa:UnjfMT2ESnUJrCwYjwDaO32vLStDs4t
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan