f8f1a2463b15834e90f9d9cef6465af76848da2369c2cba458c9d1bbbc0e37fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8f1a2463b15834e90f9d9cef6465af76848da2369c2cba458c9d1bbbc0e37fc
Size

893KB
Sample

221126-3t56aahc6x
MD5

bbc2352da2c9405472cc8e6e7e405e07
SHA1

9878eafb2fc27ea1a39476a744e1157b148d9b82
SHA256

f8f1a2463b15834e90f9d9cef6465af76848da2369c2cba458c9d1bbbc0e37fc
SHA512

5f7b63dcddc09205e459baea30580e70c24d2c8585cde6f8c1a8967f37460e214f117162f89ff23a370b6bf9a329d097b12b356e59168221405ed48b92934865
SSDEEP

12288:4BuQCX1KWqiZKQGYvy7M97bNyQbNnNj56vCuDOxabc2j0jCoCNr9+kJ8j2SMBv0:4OqDfYv1R9pnG/Eab5WCoCd22xv0

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  f8f1a2463b15834e90f9d9cef6465af76848da2369c2cba458c9d1bbbc0e37fc
- Size
  
  893KB
- MD5
  
  bbc2352da2c9405472cc8e6e7e405e07
- SHA1
  
  9878eafb2fc27ea1a39476a744e1157b148d9b82
- SHA256
  
  f8f1a2463b15834e90f9d9cef6465af76848da2369c2cba458c9d1bbbc0e37fc
- SHA512
  
  5f7b63dcddc09205e459baea30580e70c24d2c8585cde6f8c1a8967f37460e214f117162f89ff23a370b6bf9a329d097b12b356e59168221405ed48b92934865
- SSDEEP
  
  12288:4BuQCX1KWqiZKQGYvy7M97bNyQbNnNj56vCuDOxabc2j0jCoCNr9+kJ8j2SMBv0:4OqDfYv1R9pnG/Eab5WCoCd22xv0
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2