af60ce1494f419dd297bb250df4f321b22c3e7a9e3b67a64e01bf99f86819b67 | Triage

Sharing

General

Target

af60ce1494f419dd297bb250df4f321b22c3e7a9e3b67a64e01bf99f86819b67
Size

923KB
Sample

221127-zwwsvahd39
MD5

727172b5f872de1f9d341e021ff17bc8
SHA1

b3899ce34c2077a0edc1e37b05f7a5ce5bd0d56c
SHA256

af60ce1494f419dd297bb250df4f321b22c3e7a9e3b67a64e01bf99f86819b67
SHA512

637bedaf4915703b25a1315614be70eafe1c12d9561adee05c6af02f6c6bb34e425b023182d8c0f6766caabe8170d279ee462bf351643b809ccd39e95d24161f
SSDEEP

24576:Y9tx/ujOG+yhrJxK1KbFdHRXBPWJme+4DuU7g5uX:A/wOYewFdXPWJmq/9X

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  af60ce1494f419dd297bb250df4f321b22c3e7a9e3b67a64e01bf99f86819b67
- Size
  
  923KB
- MD5
  
  727172b5f872de1f9d341e021ff17bc8
- SHA1
  
  b3899ce34c2077a0edc1e37b05f7a5ce5bd0d56c
- SHA256
  
  af60ce1494f419dd297bb250df4f321b22c3e7a9e3b67a64e01bf99f86819b67
- SHA512
  
  637bedaf4915703b25a1315614be70eafe1c12d9561adee05c6af02f6c6bb34e425b023182d8c0f6766caabe8170d279ee462bf351643b809ccd39e95d24161f
- SSDEEP
  
  24576:Y9tx/ujOG+yhrJxK1KbFdHRXBPWJme+4DuU7g5uX:A/wOYewFdXPWJmq/9X
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2