eef60152567803cf501ef2dba1bf72e88c6425f7f3012ced01044b0803316521 | Triage

Sharing

General

Target

eef60152567803cf501ef2dba1bf72e88c6425f7f3012ced01044b0803316521
Size

780KB
Sample

221125-mjnkgseb4y
MD5

ebe0f534c0b5cb96d30707c8f2cc0543
SHA1

cb518f845487cdc96c63d42b1f6f74721997ed1d
SHA256

eef60152567803cf501ef2dba1bf72e88c6425f7f3012ced01044b0803316521
SHA512

a379f0d451d27fa16b728e76d89e5aa66159be302265e41e0c9898567af182b9a7b84fe34d01ae2a29badfbea5639a1ff45e18c23bf0fa8f7ecb928a336e749d
SSDEEP

24576:qhiDoNJQWSSoE2clDYnfGpXRjG4nXpYrTQbgni1:eiDPWSSCclsfGvGL0Mi

Score

8^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  eef60152567803cf501ef2dba1bf72e88c6425f7f3012ced01044b0803316521
- Size
  
  780KB
- MD5
  
  ebe0f534c0b5cb96d30707c8f2cc0543
- SHA1
  
  cb518f845487cdc96c63d42b1f6f74721997ed1d
- SHA256
  
  eef60152567803cf501ef2dba1bf72e88c6425f7f3012ced01044b0803316521
- SHA512
  
  a379f0d451d27fa16b728e76d89e5aa66159be302265e41e0c9898567af182b9a7b84fe34d01ae2a29badfbea5639a1ff45e18c23bf0fa8f7ecb928a336e749d
- SSDEEP
  
  24576:qhiDoNJQWSSoE2clDYnfGpXRjG4nXpYrTQbgni1:eiDPWSSCclsfGvGL0Mi
Score

8^/10

evasion persistence trojan
- Executes dropped EXE
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan