ac0f9e99488887cb8a9a1876cfb5451ac2358fb1dd59f0fbe56b3a19eb87b9b4 | Triage

Sharing

General

Target

ac0f9e99488887cb8a9a1876cfb5451ac2358fb1dd59f0fbe56b3a19eb87b9b4
Size

789KB
Sample

221124-c3snfafb9s
MD5

41595cbca26376ca0f345a4639d1022a
SHA1

3457ce7be96b3648ab13bb175b4c78c6dcd2da4b
SHA256

ac0f9e99488887cb8a9a1876cfb5451ac2358fb1dd59f0fbe56b3a19eb87b9b4
SHA512

bfacf7eabd45183df32d335f6aa122a860512a6b45e8ae7511d7bd6dd3f5a9d146eabb710a15bacef68885ade41c4429bc82334df5a573c44f249f1b5cbb8342
SSDEEP

12288:CbFifBtSo84Ux2FgBmsw5E9J0/C0ViUCis0Ci1t0OHMTQVauylk7ZXaT7m5NoT:wmtSilXV60BVci9Ci1SFTpuylsa7mPoT

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ac0f9e99488887cb8a9a1876cfb5451ac2358fb1dd59f0fbe56b3a19eb87b9b4
- Size
  
  789KB
- MD5
  
  41595cbca26376ca0f345a4639d1022a
- SHA1
  
  3457ce7be96b3648ab13bb175b4c78c6dcd2da4b
- SHA256
  
  ac0f9e99488887cb8a9a1876cfb5451ac2358fb1dd59f0fbe56b3a19eb87b9b4
- SHA512
  
  bfacf7eabd45183df32d335f6aa122a860512a6b45e8ae7511d7bd6dd3f5a9d146eabb710a15bacef68885ade41c4429bc82334df5a573c44f249f1b5cbb8342
- SSDEEP
  
  12288:CbFifBtSo84Ux2FgBmsw5E9J0/C0ViUCis0Ci1t0OHMTQVauylk7ZXaT7m5NoT:wmtSilXV60BVci9Ci1SFTpuylsa7mPoT
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan