4b2d76528a2836405ff5a2bfef89ab43589950a5d6dcc64a890b14206160ffe7 | Triage

Sharing

General

Target

4b2d76528a2836405ff5a2bfef89ab43589950a5d6dcc64a890b14206160ffe7
Size

913KB
Sample

221126-3r4jnshb4t
MD5

f8f3e45643fcf53ab5e76f26cc67b920
SHA1

61d3cc7874aee2cb0e176416ae516c1e6f78efc1
SHA256

4b2d76528a2836405ff5a2bfef89ab43589950a5d6dcc64a890b14206160ffe7
SHA512

00f7fda76d08d2769cff0e0c78ca0f2bd26b79733fbbc7507390150513ad36400dc85907f359b077060f44fc09ba90112a446d4c667b2373b722e5f6bebe13f6
SSDEEP

24576:HqPOPommzphoJk/nD9skVNBzyrpLjiT4x8Gc8oAfVB:H5PSzB/MrpP8W8io6B

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  4b2d76528a2836405ff5a2bfef89ab43589950a5d6dcc64a890b14206160ffe7
- Size
  
  913KB
- MD5
  
  f8f3e45643fcf53ab5e76f26cc67b920
- SHA1
  
  61d3cc7874aee2cb0e176416ae516c1e6f78efc1
- SHA256
  
  4b2d76528a2836405ff5a2bfef89ab43589950a5d6dcc64a890b14206160ffe7
- SHA512
  
  00f7fda76d08d2769cff0e0c78ca0f2bd26b79733fbbc7507390150513ad36400dc85907f359b077060f44fc09ba90112a446d4c667b2373b722e5f6bebe13f6
- SSDEEP
  
  24576:HqPOPommzphoJk/nD9skVNBzyrpLjiT4x8Gc8oAfVB:H5PSzB/MrpP8W8io6B
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2