ad2b9ff097b95dbbb34688aa02d545f6eaedf5ec6996339c5c989627a6b517df | Triage

Sharing

General

Target

ad2b9ff097b95dbbb34688aa02d545f6eaedf5ec6996339c5c989627a6b517df
Size

743KB
Sample

221128-fmaz8scb7s
MD5

659e7747f2d5deb177459aa940ac6dd3
SHA1

1b95bff2766b5ea05872955fdb2804989a9a278c
SHA256

ad2b9ff097b95dbbb34688aa02d545f6eaedf5ec6996339c5c989627a6b517df
SHA512

125aa70b66a80f50c62d68f872f53d362717a8e4392cfe85bd05ecc610ea1238037852dbe9bef9b34d5d15bb2da994e2c438697a38c25239e35a4eebd96e5f64
SSDEEP

12288:AjgV7RbM52iXi4L/lemryHuJP9f3TmmOnigJpddjwK8yPIfwgMPb0flqiZT8EOEg:osKy4L/Ymr/ff3lPgJf8KXbyVT8EFFq

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ad2b9ff097b95dbbb34688aa02d545f6eaedf5ec6996339c5c989627a6b517df
- Size
  
  743KB
- MD5
  
  659e7747f2d5deb177459aa940ac6dd3
- SHA1
  
  1b95bff2766b5ea05872955fdb2804989a9a278c
- SHA256
  
  ad2b9ff097b95dbbb34688aa02d545f6eaedf5ec6996339c5c989627a6b517df
- SHA512
  
  125aa70b66a80f50c62d68f872f53d362717a8e4392cfe85bd05ecc610ea1238037852dbe9bef9b34d5d15bb2da994e2c438697a38c25239e35a4eebd96e5f64
- SSDEEP
  
  12288:AjgV7RbM52iXi4L/lemryHuJP9f3TmmOnigJpddjwK8yPIfwgMPb0flqiZT8EOEg:osKy4L/Ymr/ff3lPgJf8KXbyVT8EFFq
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2