abf2acbdff4cff4cb325f92c5b637a35b3881865e352f8bb25b804b3f337c7b3 | Triage

Sharing

General

Target

abf2acbdff4cff4cb325f92c5b637a35b3881865e352f8bb25b804b3f337c7b3
Size

684KB
Sample

221124-ed42aaae7s
MD5

912510e85f66e7a7fe9ed447391e605c
SHA1

188ffb3990f6323fd9f3769fe87ee8172283cd3b
SHA256

abf2acbdff4cff4cb325f92c5b637a35b3881865e352f8bb25b804b3f337c7b3
SHA512

3478beb6bb8211181fffa3283225446bf4807f4b1d0d99d75f6e56fe8312e1bc6423cb0add5d51922f76d972c4a54eca772df8dde431ff4292d2fa1ccfa25868
SSDEEP

12288:8/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alt:8sD18Xa1A3YBZffJWCNhjeFTIfMUvOlt

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  abf2acbdff4cff4cb325f92c5b637a35b3881865e352f8bb25b804b3f337c7b3
- Size
  
  684KB
- MD5
  
  912510e85f66e7a7fe9ed447391e605c
- SHA1
  
  188ffb3990f6323fd9f3769fe87ee8172283cd3b
- SHA256
  
  abf2acbdff4cff4cb325f92c5b637a35b3881865e352f8bb25b804b3f337c7b3
- SHA512
  
  3478beb6bb8211181fffa3283225446bf4807f4b1d0d99d75f6e56fe8312e1bc6423cb0add5d51922f76d972c4a54eca772df8dde431ff4292d2fa1ccfa25868
- SSDEEP
  
  12288:8/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alt:8sD18Xa1A3YBZffJWCNhjeFTIfMUvOlt
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan