Overview

overview

8

Static

static

b41a17d8ac...05.exe

windows7-x64

8

b41a17d8ac...05.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b41a17d8accd4b5b564f8ce443c07b429f6ddb3b47ad06900db32cc18223e605

  • Size

    874KB

  • Sample

    221128-rye9waeg8t

  • MD5

    ad075b2715427d586366dc580169a819

  • SHA1

    404e8822e9e205e92c97ac41a84d7a270826d0a2

  • SHA256

    b41a17d8accd4b5b564f8ce443c07b429f6ddb3b47ad06900db32cc18223e605

  • SHA512

    2e8461115953ad1d131409b9fdde47b48fe3a0453abdcbbd0e8fa1e855d24151242f87585770e723b947721d3dacf7db309a60309bedfec3e3324cbd2af3af02

  • SSDEEP

    24576:Om9v5i3VvH+K1W42zFtEDXxOlwSNUlj24T:Om9u/+K1W42zFGDhoLNUljJT

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      b41a17d8accd4b5b564f8ce443c07b429f6ddb3b47ad06900db32cc18223e605

    • Size

      874KB

    • MD5

      ad075b2715427d586366dc580169a819

    • SHA1

      404e8822e9e205e92c97ac41a84d7a270826d0a2

    • SHA256

      b41a17d8accd4b5b564f8ce443c07b429f6ddb3b47ad06900db32cc18223e605

    • SHA512

      2e8461115953ad1d131409b9fdde47b48fe3a0453abdcbbd0e8fa1e855d24151242f87585770e723b947721d3dacf7db309a60309bedfec3e3324cbd2af3af02

    • SSDEEP

      24576:Om9v5i3VvH+K1W42zFtEDXxOlwSNUlj24T:Om9u/+K1W42zFGDhoLNUljJT

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks