acda20543e3cfe347b3a1d223de5dde931fbc4bfbcb96cbcaf6efb0590a867e6 | Triage

Sharing

General

Target

acda20543e3cfe347b3a1d223de5dde931fbc4bfbcb96cbcaf6efb0590a867e6
Size

821KB
Sample

221128-jr263agb66
MD5

9438f2bbf6cda644c39153787c761349
SHA1

7a730ec6e4e21d3595a7155d290b049d8aa997e8
SHA256

acda20543e3cfe347b3a1d223de5dde931fbc4bfbcb96cbcaf6efb0590a867e6
SHA512

fb4bfabff70bd6c71d9ac26e5b122f56a2ee0b8c5dc42f4ce32ac09667b9dcc454922f1bc8bdbaa6a70b62bf5100cf3a3e9b6ca3c864eabb76aa7cddc83f9b47
SSDEEP

12288:4uCRBPxew1HBa47TIEh7vUwx5tBsCzwPOIw+fKg+hraeUu8EKiEIJoZfQ2uo:43dJj5nKbwG3+J3KDIJoZo2uo

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  acda20543e3cfe347b3a1d223de5dde931fbc4bfbcb96cbcaf6efb0590a867e6
- Size
  
  821KB
- MD5
  
  9438f2bbf6cda644c39153787c761349
- SHA1
  
  7a730ec6e4e21d3595a7155d290b049d8aa997e8
- SHA256
  
  acda20543e3cfe347b3a1d223de5dde931fbc4bfbcb96cbcaf6efb0590a867e6
- SHA512
  
  fb4bfabff70bd6c71d9ac26e5b122f56a2ee0b8c5dc42f4ce32ac09667b9dcc454922f1bc8bdbaa6a70b62bf5100cf3a3e9b6ca3c864eabb76aa7cddc83f9b47
- SSDEEP
  
  12288:4uCRBPxew1HBa47TIEh7vUwx5tBsCzwPOIw+fKg+hraeUu8EKiEIJoZfQ2uo:43dJj5nKbwG3+J3KDIJoZo2uo
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan