Overview

overview

8

Static

static

36a6a112a2...a3.exe

windows7-x64

8

36a6a112a2...a3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36a6a112a2935df3d913f78e7e965dbb3b1a9a916c4e45dfbc8120b9f20262a3

  • Size

    871KB

  • Sample

    221128-dqrfaaeh3t

  • MD5

    9f7d5c165dffc5a13bc621425989ea0c

  • SHA1

    341ddeaabb5d387c8db278a81241bdace20d26a3

  • SHA256

    36a6a112a2935df3d913f78e7e965dbb3b1a9a916c4e45dfbc8120b9f20262a3

  • SHA512

    4f604a8e36c3b224e4dad756d1852310ce77654c9333296985d60b99eee335a04beac61a88c5299af36527068d4b1955e4a8b7bf909f921769c27219d3f3091f

  • SSDEEP

    24576:jhwRQtrmTC99d6kdWlTyfF5vbI9aj5fgD0Nx:jhwRQt6Tu9skSyHbWajRgGx

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      36a6a112a2935df3d913f78e7e965dbb3b1a9a916c4e45dfbc8120b9f20262a3

    • Size

      871KB

    • MD5

      9f7d5c165dffc5a13bc621425989ea0c

    • SHA1

      341ddeaabb5d387c8db278a81241bdace20d26a3

    • SHA256

      36a6a112a2935df3d913f78e7e965dbb3b1a9a916c4e45dfbc8120b9f20262a3

    • SHA512

      4f604a8e36c3b224e4dad756d1852310ce77654c9333296985d60b99eee335a04beac61a88c5299af36527068d4b1955e4a8b7bf909f921769c27219d3f3091f

    • SSDEEP

      24576:jhwRQtrmTC99d6kdWlTyfF5vbI9aj5fgD0Nx:jhwRQt6Tu9skSyHbWajRgGx

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks