ac15977ee6762da0f38e2b189da4327a1d1110e849b6cf043f26267a243048a0 | Triage

Sharing

General

Target

ac15977ee6762da0f38e2b189da4327a1d1110e849b6cf043f26267a243048a0
Size

809KB
Sample

221124-ct7e8sbd49
MD5

8e0224a43603b1b244ef850b512a3204
SHA1

953ddce4435bdb98914451ebdfab9ced2b332546
SHA256

ac15977ee6762da0f38e2b189da4327a1d1110e849b6cf043f26267a243048a0
SHA512

8df01280ac5139453a28c203ea5cf5d9c01589b17097334c17e392e54e312f3ab13779b5ddde60bde688bfa1c4fc422d3a17aa49940b1ddc567f736ca736dae3
SSDEEP

12288:1JAhQ36gDq7bD+5xDM+fWpDTVjAzhyIzCAx0s4p15kM20t2mBYZTvIyuLJ9InYOm:1T3Do6WZdIazkMldqTvmLJ9ILp0Lt

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ac15977ee6762da0f38e2b189da4327a1d1110e849b6cf043f26267a243048a0
- Size
  
  809KB
- MD5
  
  8e0224a43603b1b244ef850b512a3204
- SHA1
  
  953ddce4435bdb98914451ebdfab9ced2b332546
- SHA256
  
  ac15977ee6762da0f38e2b189da4327a1d1110e849b6cf043f26267a243048a0
- SHA512
  
  8df01280ac5139453a28c203ea5cf5d9c01589b17097334c17e392e54e312f3ab13779b5ddde60bde688bfa1c4fc422d3a17aa49940b1ddc567f736ca736dae3
- SSDEEP
  
  12288:1JAhQ36gDq7bD+5xDM+fWpDTVjAzhyIzCAx0s4p15kM20t2mBYZTvIyuLJ9InYOm:1T3Do6WZdIazkMldqTvmLJ9ILp0Lt
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2