Overview

overview

8

Static

static

ac268cb7f0...ed.exe

windows7-x64

8

ac268cb7f0...ed.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac268cb7f09672507739ae2dfb07fdce160faa486cee12f588ebc7fa55bd5eed

  • Size

    893KB

  • Sample

    221128-r1syraba69

  • MD5

    07772d0a6c5b48c7cf379d12275337b1

  • SHA1

    8b5788dc84f4e30cf21aee6bb178153d440d7742

  • SHA256

    ac268cb7f09672507739ae2dfb07fdce160faa486cee12f588ebc7fa55bd5eed

  • SHA512

    84429fa6f57005b8a7a133ca7f2e8bf7c5431878e9679b053e43cd7b1a8300195a8aabf3b022011a2ef71c398872d8a1b9b2bc4e484ab1c571d626275c6ddbf4

  • SSDEEP

    24576:3NjolfHshGnz6tq9NecobQPvBCUX1d58V/w1EJTiI3+gwtPzA:3dokhGzUq9NectPptX13O/kCTh33ArA

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ac268cb7f09672507739ae2dfb07fdce160faa486cee12f588ebc7fa55bd5eed

    • Size

      893KB

    • MD5

      07772d0a6c5b48c7cf379d12275337b1

    • SHA1

      8b5788dc84f4e30cf21aee6bb178153d440d7742

    • SHA256

      ac268cb7f09672507739ae2dfb07fdce160faa486cee12f588ebc7fa55bd5eed

    • SHA512

      84429fa6f57005b8a7a133ca7f2e8bf7c5431878e9679b053e43cd7b1a8300195a8aabf3b022011a2ef71c398872d8a1b9b2bc4e484ab1c571d626275c6ddbf4

    • SSDEEP

      24576:3NjolfHshGnz6tq9NecobQPvBCUX1d58V/w1EJTiI3+gwtPzA:3dokhGzUq9NectPptX13O/kCTh33ArA

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks