edf413b1150c313c1b5c22a90c9d615716d154beac8ca37ca8de3fcc34bac923 | Triage

Sharing

General

Target

edf413b1150c313c1b5c22a90c9d615716d154beac8ca37ca8de3fcc34bac923
Size

817KB
Sample

221124-j1j2vade2s
MD5

410d6a145f2a0dd41cfd4dcfae186753
SHA1

401486df848788ff4f744d587fa79053f85afd92
SHA256

edf413b1150c313c1b5c22a90c9d615716d154beac8ca37ca8de3fcc34bac923
SHA512

c226ee53c0da5d47946811c3cfc7cb0660c403ec615667b87392fa2be3259be309d0bc5b963b018397bdf9b376961c12824af635a8a0c21333d2a70a2e9334a9
SSDEEP

12288:9UV9LDBdsoOvyO622PDeRWL2wvgRL8+o1LWowkrcnwjcXngp07vdF4VJX72kuj:LoOadB2Tmn1LgRn+cW0JFEJXqkuj

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  edf413b1150c313c1b5c22a90c9d615716d154beac8ca37ca8de3fcc34bac923
- Size
  
  817KB
- MD5
  
  410d6a145f2a0dd41cfd4dcfae186753
- SHA1
  
  401486df848788ff4f744d587fa79053f85afd92
- SHA256
  
  edf413b1150c313c1b5c22a90c9d615716d154beac8ca37ca8de3fcc34bac923
- SHA512
  
  c226ee53c0da5d47946811c3cfc7cb0660c403ec615667b87392fa2be3259be309d0bc5b963b018397bdf9b376961c12824af635a8a0c21333d2a70a2e9334a9
- SSDEEP
  
  12288:9UV9LDBdsoOvyO622PDeRWL2wvgRL8+o1LWowkrcnwjcXngp07vdF4VJX72kuj:LoOadB2Tmn1LgRn+cW0JFEJXqkuj
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan