ac192ab37bd32914faff6c22e9837ae00489bc3941df079573448f361d59515d | Triage

Sharing

General

Target

ac192ab37bd32914faff6c22e9837ae00489bc3941df079573448f361d59515d
Size

817KB
Sample

221124-cpc1tsba58
MD5

162a497886f24f0b8f5b6f3eed328c2d
SHA1

f4a9ffbdcad35db2fbe06800e33f48a6e82ffbd7
SHA256

ac192ab37bd32914faff6c22e9837ae00489bc3941df079573448f361d59515d
SHA512

8eb64b2092018ffd566dba8b269896f03f7c84801c94be87783f911a74174a4fc909781d78a61308a438315b1223489e07916c7c105dc82edbcec172e994b58c
SSDEEP

12288:+nk5yIf7TL68t5Afa1gG4SoW4ACvW9fIXWJtSrEj2SscG9AUuEqCWYh9GM7bsbbE:+koIffLDAC/EWi+0WyEAGCWLM7UbuYG

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ac192ab37bd32914faff6c22e9837ae00489bc3941df079573448f361d59515d
- Size
  
  817KB
- MD5
  
  162a497886f24f0b8f5b6f3eed328c2d
- SHA1
  
  f4a9ffbdcad35db2fbe06800e33f48a6e82ffbd7
- SHA256
  
  ac192ab37bd32914faff6c22e9837ae00489bc3941df079573448f361d59515d
- SHA512
  
  8eb64b2092018ffd566dba8b269896f03f7c84801c94be87783f911a74174a4fc909781d78a61308a438315b1223489e07916c7c105dc82edbcec172e994b58c
- SSDEEP
  
  12288:+nk5yIf7TL68t5Afa1gG4SoW4ACvW9fIXWJtSrEj2SscG9AUuEqCWYh9GM7bsbbE:+koIffLDAC/EWi+0WyEAGCWLM7UbuYG
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan