ac149057552dbbda8e2b1424a480d634581b6aa1615f73266348fd04ae9836a4 | Triage

Sharing

General

Target

ac149057552dbbda8e2b1424a480d634581b6aa1615f73266348fd04ae9836a4
Size

821KB
Sample

221124-cwkz1sbd98
MD5

4835073c5c414cccfc747849478b4625
SHA1

ffdc3329216c8fc754858e2b8f6e15490f770e24
SHA256

ac149057552dbbda8e2b1424a480d634581b6aa1615f73266348fd04ae9836a4
SHA512

654857ac0b90f7d1b20877bc4680821c86726b3726fab5f727f7772db08e051033dfdc9eb6631e1a19788acbbfc5ba687db7ce114a041ed6a3b146640d8c489a
SSDEEP

12288:Rxk8LJGkDxqK2ylTCSgTZhTLerWM4PdVWIIKpAb6ArQgO89AnN26y5ZrKq4KUqZN:vH10UTCS+DM4HsJ3Fb4KUqZN

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ac149057552dbbda8e2b1424a480d634581b6aa1615f73266348fd04ae9836a4
- Size
  
  821KB
- MD5
  
  4835073c5c414cccfc747849478b4625
- SHA1
  
  ffdc3329216c8fc754858e2b8f6e15490f770e24
- SHA256
  
  ac149057552dbbda8e2b1424a480d634581b6aa1615f73266348fd04ae9836a4
- SHA512
  
  654857ac0b90f7d1b20877bc4680821c86726b3726fab5f727f7772db08e051033dfdc9eb6631e1a19788acbbfc5ba687db7ce114a041ed6a3b146640d8c489a
- SSDEEP
  
  12288:Rxk8LJGkDxqK2ylTCSgTZhTLerWM4PdVWIIKpAb6ArQgO89AnN26y5ZrKq4KUqZN:vH10UTCS+DM4HsJ3Fb4KUqZN
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan