Overview

overview

8

Static

static

69c2a01ab0...4b.exe

windows7-x64

8

69c2a01ab0...4b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69c2a01ab0f4ecab971359f17daffc773281e5e9b7f8050e097b5d2d99cc564b

  • Size

    822KB

  • Sample

    221124-n4yrmacb22

  • MD5

    d4b72394245cc6556197234f8f4b1057

  • SHA1

    098d9f2e77b8685e4abc810adecf2ef05b498c48

  • SHA256

    69c2a01ab0f4ecab971359f17daffc773281e5e9b7f8050e097b5d2d99cc564b

  • SHA512

    5587776eb283d1e955ede2b70aecaf50866c5bcbf9727cb2fd6593a273d360fd4640e69922c941591cfe573748c32e5e96bdb3df0d9c2551527dcdb80127da2b

  • SSDEEP

    12288:H/1fYubjfwUQEjEj5O5fqRk9ZJbV7osjVugoX3C5CJLb4JnJihm+08/MmgPCL6m3:H/1fXXobOlxV/uG5TB8EDe6mL5hD

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      69c2a01ab0f4ecab971359f17daffc773281e5e9b7f8050e097b5d2d99cc564b

    • Size

      822KB

    • MD5

      d4b72394245cc6556197234f8f4b1057

    • SHA1

      098d9f2e77b8685e4abc810adecf2ef05b498c48

    • SHA256

      69c2a01ab0f4ecab971359f17daffc773281e5e9b7f8050e097b5d2d99cc564b

    • SHA512

      5587776eb283d1e955ede2b70aecaf50866c5bcbf9727cb2fd6593a273d360fd4640e69922c941591cfe573748c32e5e96bdb3df0d9c2551527dcdb80127da2b

    • SSDEEP

      12288:H/1fYubjfwUQEjEj5O5fqRk9ZJbV7osjVugoX3C5CJLb4JnJihm+08/MmgPCL6m3:H/1fXXobOlxV/uG5TB8EDe6mL5hD

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks