Overview

overview

8

Static

static

ac6457c13a...ca.exe

windows7-x64

8

ac6457c13a...ca.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac6457c13aff9fb30128e99e71a4a335e357e66b89b8b986162a5abbd6313cca

  • Size

    815KB

  • Sample

    221128-pcxkxsgd7s

  • MD5

    7283c9d2f6a3d90a72a46a93ce054f66

  • SHA1

    f152aa2adb4bda1b5fe8da39aab851102f41ff1a

  • SHA256

    ac6457c13aff9fb30128e99e71a4a335e357e66b89b8b986162a5abbd6313cca

  • SHA512

    87a5067715d6f93adf7d38e09b28f2fe3537073436a2a1dc44b0897d6250a65796b29bd3312b04d84b52c937dd87b79a42e1bc25b32b2d06d8956be5e33ba2e8

  • SSDEEP

    24576:wP10rcZxU7XlN+dbXQt37A4OdoDZFE/np:q0ryoVzt3k4d8p

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ac6457c13aff9fb30128e99e71a4a335e357e66b89b8b986162a5abbd6313cca

    • Size

      815KB

    • MD5

      7283c9d2f6a3d90a72a46a93ce054f66

    • SHA1

      f152aa2adb4bda1b5fe8da39aab851102f41ff1a

    • SHA256

      ac6457c13aff9fb30128e99e71a4a335e357e66b89b8b986162a5abbd6313cca

    • SHA512

      87a5067715d6f93adf7d38e09b28f2fe3537073436a2a1dc44b0897d6250a65796b29bd3312b04d84b52c937dd87b79a42e1bc25b32b2d06d8956be5e33ba2e8

    • SSDEEP

      24576:wP10rcZxU7XlN+dbXQt37A4OdoDZFE/np:q0ryoVzt3k4d8p

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks