aeb87c3043e604cb79d603980a2055ad514ed41e4fc9826e735672dff4807524 | Triage

Sharing

General

Target

aeb87c3043e604cb79d603980a2055ad514ed41e4fc9826e735672dff4807524
Size

878KB
Sample

221127-zw2n4ahd46
MD5

a6152ff8fcf9c7f44cb2300d60947d65
SHA1

40958162307a6aec317806ccbd3810298a69aee5
SHA256

aeb87c3043e604cb79d603980a2055ad514ed41e4fc9826e735672dff4807524
SHA512

05a3ec5307ea26ff6807c1a38f63de7a11d1cfcb7969ab40e3fde433b4a94255518f0b22d48279a58e8baa2fbea96ccc11df1aa82c5c12cb67c615efc805d1a6
SSDEEP

24576:VNIyyxOglfaGIZvTWGcmp/YxgTrP3bR5Xh/Wx1SA:jIyyxOglfaGIZvTWGDpQUrPbvBYEA

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  aeb87c3043e604cb79d603980a2055ad514ed41e4fc9826e735672dff4807524
- Size
  
  878KB
- MD5
  
  a6152ff8fcf9c7f44cb2300d60947d65
- SHA1
  
  40958162307a6aec317806ccbd3810298a69aee5
- SHA256
  
  aeb87c3043e604cb79d603980a2055ad514ed41e4fc9826e735672dff4807524
- SHA512
  
  05a3ec5307ea26ff6807c1a38f63de7a11d1cfcb7969ab40e3fde433b4a94255518f0b22d48279a58e8baa2fbea96ccc11df1aa82c5c12cb67c615efc805d1a6
- SSDEEP
  
  24576:VNIyyxOglfaGIZvTWGcmp/YxgTrP3bR5Xh/Wx1SA:jIyyxOglfaGIZvTWGDpQUrPbvBYEA
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2