7221cf498998206ef548ba1e717e4246c0fcf9eed8fa8361b54de3171cc58d87 | Triage

Sharing

General

Target

7221cf498998206ef548ba1e717e4246c0fcf9eed8fa8361b54de3171cc58d87
Size

871KB
Sample

221126-2vejaaef8x
MD5

ddd165079c1359c819cf279c9c0d36fb
SHA1

c31a93f6d891676b323d14665f43cffe43e52df2
SHA256

7221cf498998206ef548ba1e717e4246c0fcf9eed8fa8361b54de3171cc58d87
SHA512

3e32a354a4eb9550ee4e9131e6aa7a4db5ff329ba29af6d09764c9dd08169a6e009c5de04bbb04202a646fff35240f6957f0cccdde4392ce2092907071695137
SSDEEP

24576:8sjxQtfmTiipGya1gBROiuTn+fj7BMIwjQNc:8sjxQtuTppzOXTnOjVwKc

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  7221cf498998206ef548ba1e717e4246c0fcf9eed8fa8361b54de3171cc58d87
- Size
  
  871KB
- MD5
  
  ddd165079c1359c819cf279c9c0d36fb
- SHA1
  
  c31a93f6d891676b323d14665f43cffe43e52df2
- SHA256
  
  7221cf498998206ef548ba1e717e4246c0fcf9eed8fa8361b54de3171cc58d87
- SHA512
  
  3e32a354a4eb9550ee4e9131e6aa7a4db5ff329ba29af6d09764c9dd08169a6e009c5de04bbb04202a646fff35240f6957f0cccdde4392ce2092907071695137
- SSDEEP
  
  24576:8sjxQtfmTiipGya1gBROiuTn+fj7BMIwjQNc:8sjxQtuTppzOXTnOjVwKc
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2