b7fccef664a85575bead17c2e5ea699767beb3f047b22989671e2e05517a12c8 | Triage

Sharing

General

Target

b7fccef664a85575bead17c2e5ea699767beb3f047b22989671e2e05517a12c8
Size

154KB
Sample

221203-hfwz8scg47
MD5

51803ab1d6dff4d18771d9ad3f3b88a3
SHA1

60f681806bef26b47d575395a79639df1e9756e1
SHA256

b7fccef664a85575bead17c2e5ea699767beb3f047b22989671e2e05517a12c8
SHA512

68f6783cf19d12b9c4cb299ae651f133e526f3aeff56c363139de0ccd38bfd45ff0f736d884a464d5429fe2d8fd027785e5a17b580cca632a874ce8c793df0b6
SSDEEP

3072:bS9U/CdhiTqHRX3VJgj4aGPXgtaqVshBhUKahPe7ROdTmejvpQ0ncR+HX:bS9dkTqHRXF6j43PwYhBex2ROdKer+AR

Score

7^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  b7fccef664a85575bead17c2e5ea699767beb3f047b22989671e2e05517a12c8
- Size
  
  154KB
- MD5
  
  51803ab1d6dff4d18771d9ad3f3b88a3
- SHA1
  
  60f681806bef26b47d575395a79639df1e9756e1
- SHA256
  
  b7fccef664a85575bead17c2e5ea699767beb3f047b22989671e2e05517a12c8
- SHA512
  
  68f6783cf19d12b9c4cb299ae651f133e526f3aeff56c363139de0ccd38bfd45ff0f736d884a464d5429fe2d8fd027785e5a17b580cca632a874ce8c793df0b6
- SSDEEP
  
  3072:bS9U/CdhiTqHRX3VJgj4aGPXgtaqVshBhUKahPe7ROdTmejvpQ0ncR+HX:bS9dkTqHRXF6j43PwYhBex2ROdKer+AR
Score

7^/10

evasion persistence trojan
- Deletes itself
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan