b965db52af4cd39eb4c15a15c13bb1d1fb8b9f47f64a90936c54144b2b108d80 | Triage

Sharing

General

Target

b965db52af4cd39eb4c15a15c13bb1d1fb8b9f47f64a90936c54144b2b108d80
Size

833KB
Sample

221124-nzllhabg69
MD5

b9c0bcb0017b5097a62a05b82ed21b59
SHA1

6df210bdfccff27525e3479c5765deb4cf5e1a9a
SHA256

b965db52af4cd39eb4c15a15c13bb1d1fb8b9f47f64a90936c54144b2b108d80
SHA512

c60a3d13fd5fbe1f817669b58dd8596b98365f48b73d7f955d3a3f4b8f292ef6b08c46da7f477c9b26f9bfc798b4ae828c7e29e91edcc959d9eb71224add3bc9
SSDEEP

24576:hnjh1T26RXBwlypCpUBfX6l0jntXtD476cSaA:hnXzXBwQM8fX6WDfD47TA

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  b965db52af4cd39eb4c15a15c13bb1d1fb8b9f47f64a90936c54144b2b108d80
- Size
  
  833KB
- MD5
  
  b9c0bcb0017b5097a62a05b82ed21b59
- SHA1
  
  6df210bdfccff27525e3479c5765deb4cf5e1a9a
- SHA256
  
  b965db52af4cd39eb4c15a15c13bb1d1fb8b9f47f64a90936c54144b2b108d80
- SHA512
  
  c60a3d13fd5fbe1f817669b58dd8596b98365f48b73d7f955d3a3f4b8f292ef6b08c46da7f477c9b26f9bfc798b4ae828c7e29e91edcc959d9eb71224add3bc9
- SSDEEP
  
  24576:hnjh1T26RXBwlypCpUBfX6l0jntXtD476cSaA:hnXzXBwQM8fX6WDfD47TA
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan