Overview

overview

8

Static

static

ce434e5130...d8.exe

windows7-x64

8

ce434e5130...d8.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce434e513014dd907c104890a5648f44fa7d140bab3f8789431a9b6de0d911d8

  • Size

    890KB

  • Sample

    221128-rwekkaef7y

  • MD5

    9c25b2046c8d4568965a9330e4bebb9b

  • SHA1

    0f2b478184cbbcb2227fa7f20aa8e283018367d1

  • SHA256

    ce434e513014dd907c104890a5648f44fa7d140bab3f8789431a9b6de0d911d8

  • SHA512

    bd47de65b28f2253d52522785834f814bf9c52b05dea0e8d08336e40d106330fe7c9f43649c2b7f5b41c5995302f5aa131171152204e54ffb3f764367934a4c8

  • SSDEEP

    24576:FuTiPAhWu8p2ylYcMCk0muWITIoL4bw653bf:wTAAhWuO8Cnm3ITIXb9hf

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      ce434e513014dd907c104890a5648f44fa7d140bab3f8789431a9b6de0d911d8

    • Size

      890KB

    • MD5

      9c25b2046c8d4568965a9330e4bebb9b

    • SHA1

      0f2b478184cbbcb2227fa7f20aa8e283018367d1

    • SHA256

      ce434e513014dd907c104890a5648f44fa7d140bab3f8789431a9b6de0d911d8

    • SHA512

      bd47de65b28f2253d52522785834f814bf9c52b05dea0e8d08336e40d106330fe7c9f43649c2b7f5b41c5995302f5aa131171152204e54ffb3f764367934a4c8

    • SSDEEP

      24576:FuTiPAhWu8p2ylYcMCk0muWITIoL4bw653bf:wTAAhWuO8Cnm3ITIXb9hf

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks