Overview

overview

8

Static

static

abe80e4442...5c.exe

windows7-x64

8

abe80e4442...5c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abe80e444292f3cbe96f7a36d46b237d6e3be2000585a1dfa7ebdbea3844e75c

  • Size

    852KB

  • Sample

    221124-es647abf4y

  • MD5

    3d767c4eb8dadd60fb32636ea36c00dc

  • SHA1

    a33e39f8c4071fc5b3157ad4253eaa1b55c4d534

  • SHA256

    abe80e444292f3cbe96f7a36d46b237d6e3be2000585a1dfa7ebdbea3844e75c

  • SHA512

    8b12d1d2004e8314bfa35e89918d02fdd33725ddef7a889256b4881151abf999a6682abe88206830880ed792507dfe0c1b95d953f2fd95507da36240eec2ab2b

  • SSDEEP

    24576:fJVL0byEy2zX/kIMCgBmYwIaX8mR5bDHhomcG:fJl0byQsIMCcanR5vHhCG

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      abe80e444292f3cbe96f7a36d46b237d6e3be2000585a1dfa7ebdbea3844e75c

    • Size

      852KB

    • MD5

      3d767c4eb8dadd60fb32636ea36c00dc

    • SHA1

      a33e39f8c4071fc5b3157ad4253eaa1b55c4d534

    • SHA256

      abe80e444292f3cbe96f7a36d46b237d6e3be2000585a1dfa7ebdbea3844e75c

    • SHA512

      8b12d1d2004e8314bfa35e89918d02fdd33725ddef7a889256b4881151abf999a6682abe88206830880ed792507dfe0c1b95d953f2fd95507da36240eec2ab2b

    • SSDEEP

      24576:fJVL0byEy2zX/kIMCgBmYwIaX8mR5bDHhomcG:fJl0byQsIMCcanR5vHhCG

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks