Overview

overview

8

Static

static

ad4ec09480...f3.exe

windows7-x64

8

ad4ec09480...f3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad4ec094807a7a36a1a40213ecd915f29befadaf90d6f485874c1e9fc5ee3ff3

  • Size

    874KB

  • Sample

    221128-eb1k3sce48

  • MD5

    03de7fc2e46202106b21a53bc20882ef

  • SHA1

    e9ba6fbd4db5a27dc3eddf520e8972b57d80d3c7

  • SHA256

    ad4ec094807a7a36a1a40213ecd915f29befadaf90d6f485874c1e9fc5ee3ff3

  • SHA512

    0aa33c614158945fa37fe0a99cd91a376d8dd9fe0fcc21f2ca6380076833a987d36cc04b61d3e78a97c6c4898d8c396a2a1f1ff65d858447e6ec578acb7a922e

  • SSDEEP

    24576:4Zx71n3VvH+yQTNTWwnZi7yb+wapOi4YDTwoCN8:4Zxv/+ywNif2x0OiTlK8

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ad4ec094807a7a36a1a40213ecd915f29befadaf90d6f485874c1e9fc5ee3ff3

    • Size

      874KB

    • MD5

      03de7fc2e46202106b21a53bc20882ef

    • SHA1

      e9ba6fbd4db5a27dc3eddf520e8972b57d80d3c7

    • SHA256

      ad4ec094807a7a36a1a40213ecd915f29befadaf90d6f485874c1e9fc5ee3ff3

    • SHA512

      0aa33c614158945fa37fe0a99cd91a376d8dd9fe0fcc21f2ca6380076833a987d36cc04b61d3e78a97c6c4898d8c396a2a1f1ff65d858447e6ec578acb7a922e

    • SSDEEP

      24576:4Zx71n3VvH+yQTNTWwnZi7yb+wapOi4YDTwoCN8:4Zxv/+ywNif2x0OiTlK8

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks