625977735cb563f19b392378b272f42c1f59994edcb65aff6f9151a58ef3f850 | Triage

Sharing

General

Target

625977735cb563f19b392378b272f42c1f59994edcb65aff6f9151a58ef3f850
Size

833KB
Sample

221124-pex98scg96
MD5

eead53591e1fc0c48bc6b225a9ce0935
SHA1

b508147b033db2aff645ef49d51c498f721563b1
SHA256

625977735cb563f19b392378b272f42c1f59994edcb65aff6f9151a58ef3f850
SHA512

2b01e4758e84028f1a684cbddef3acffbcf5b0df114dacd3794b4853db074f560ac49aba70d3307b92160f2e7dde7820667f7cf4ce11bfc403058a1e4188c78f
SSDEEP

24576:fh2X90CpHTovTzvXrcS5h5O0B5W0E7IXJ+iU/0GWz:fh2XKCpzGvbcS5dBkrIZzU/hWz

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  625977735cb563f19b392378b272f42c1f59994edcb65aff6f9151a58ef3f850
- Size
  
  833KB
- MD5
  
  eead53591e1fc0c48bc6b225a9ce0935
- SHA1
  
  b508147b033db2aff645ef49d51c498f721563b1
- SHA256
  
  625977735cb563f19b392378b272f42c1f59994edcb65aff6f9151a58ef3f850
- SHA512
  
  2b01e4758e84028f1a684cbddef3acffbcf5b0df114dacd3794b4853db074f560ac49aba70d3307b92160f2e7dde7820667f7cf4ce11bfc403058a1e4188c78f
- SSDEEP
  
  24576:fh2X90CpHTovTzvXrcS5h5O0B5W0E7IXJ+iU/0GWz:fh2XKCpzGvbcS5dBkrIZzU/hWz
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan