c884d39df66094a8c4e884328ad86ab29dc22c1f5860759f756c069c04ff2830 | Triage

Sharing

General

Target

c884d39df66094a8c4e884328ad86ab29dc22c1f5860759f756c069c04ff2830
Size

851KB
Sample

221124-l2l9psfd23
MD5

ae2b99aed97451a5fef015434cd4d695
SHA1

c165bcffa5ab7c97719ff2f71f0df74273d2e9ab
SHA256

c884d39df66094a8c4e884328ad86ab29dc22c1f5860759f756c069c04ff2830
SHA512

d3a431159636bcbf337af6e73b7e5752fc8bcdaf200a0831a591e9c4e4220c99c69210d922ff40f892cd5c21559a91233dca966e67e91c73e04946d47ce6bdfa
SSDEEP

24576:eFtB1I0OyKWyzYWgdSOPbyvJwa3ibi63pl2tgRqPAKv:EB19KBgdR26l93Ctgerv

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  c884d39df66094a8c4e884328ad86ab29dc22c1f5860759f756c069c04ff2830
- Size
  
  851KB
- MD5
  
  ae2b99aed97451a5fef015434cd4d695
- SHA1
  
  c165bcffa5ab7c97719ff2f71f0df74273d2e9ab
- SHA256
  
  c884d39df66094a8c4e884328ad86ab29dc22c1f5860759f756c069c04ff2830
- SHA512
  
  d3a431159636bcbf337af6e73b7e5752fc8bcdaf200a0831a591e9c4e4220c99c69210d922ff40f892cd5c21559a91233dca966e67e91c73e04946d47ce6bdfa
- SSDEEP
  
  24576:eFtB1I0OyKWyzYWgdSOPbyvJwa3ibi63pl2tgRqPAKv:EB19KBgdR26l93Ctgerv
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan