Overview

overview

8

Static

static

d379ae5985...b5.exe

windows7-x64

8

d379ae5985...b5.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d379ae59850eb61398f55b8bf5e48ecd2860e9e08ee562903fb9d31a644921b5

  • Size

    870KB

  • Sample

    221128-rv9pbaef7s

  • MD5

    8b12f1c9f29c4425e2c26aac98b327c6

  • SHA1

    7c62fcd804526a08e842244732e7086113d14b94

  • SHA256

    d379ae59850eb61398f55b8bf5e48ecd2860e9e08ee562903fb9d31a644921b5

  • SHA512

    339b6ef4b275a2ff76c1d921fe19ed29be81f4bfadfcbb22b566ad405ca905350c549b6f810c93df18db4831b8bc8d215ae8cd735f7fbef1e94666ee02ce1c38

  • SSDEEP

    24576:AyxjCwbyJLTck4Se7j1bmqfq9WbEr2o7z+REu6i1X8SxS5Ix6HUu1:AyxjCwbyJLAk417j1qCq9WRWTox8Sx7e

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      d379ae59850eb61398f55b8bf5e48ecd2860e9e08ee562903fb9d31a644921b5

    • Size

      870KB

    • MD5

      8b12f1c9f29c4425e2c26aac98b327c6

    • SHA1

      7c62fcd804526a08e842244732e7086113d14b94

    • SHA256

      d379ae59850eb61398f55b8bf5e48ecd2860e9e08ee562903fb9d31a644921b5

    • SHA512

      339b6ef4b275a2ff76c1d921fe19ed29be81f4bfadfcbb22b566ad405ca905350c549b6f810c93df18db4831b8bc8d215ae8cd735f7fbef1e94666ee02ce1c38

    • SSDEEP

      24576:AyxjCwbyJLTck4Se7j1bmqfq9WbEr2o7z+REu6i1X8SxS5Ix6HUu1:AyxjCwbyJLAk417j1qCq9WRWTox8Sx7e

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks