b05bc1212a4e5edad91b132d1f2b7f07ce7bbeca61631f75355eacddd8649b6b | Triage

Sharing

General

Target

b05bc1212a4e5edad91b132d1f2b7f07ce7bbeca61631f75355eacddd8649b6b
Size

852KB
Sample

221204-ca7xnabe7w
MD5

14e74a82d48e063812d5dad1131ba882
SHA1

28117b777e0bcbfc427c5095479aafd4bce3bab4
SHA256

b05bc1212a4e5edad91b132d1f2b7f07ce7bbeca61631f75355eacddd8649b6b
SHA512

304bcf8952603eea57036002d2d22f0d773aae88f8332b86eea813bac055ec32d9334f970f332b192f7754df2d84c0fa9f17b45cd579c07af5c8f9f20e8cdf2e
SSDEEP

24576:wJVL0JiEy2lP4DHmGOBO+yUQvjwTUv8TrEcz:wJl0JigGmGYQvkw+z

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  b05bc1212a4e5edad91b132d1f2b7f07ce7bbeca61631f75355eacddd8649b6b
- Size
  
  852KB
- MD5
  
  14e74a82d48e063812d5dad1131ba882
- SHA1
  
  28117b777e0bcbfc427c5095479aafd4bce3bab4
- SHA256
  
  b05bc1212a4e5edad91b132d1f2b7f07ce7bbeca61631f75355eacddd8649b6b
- SHA512
  
  304bcf8952603eea57036002d2d22f0d773aae88f8332b86eea813bac055ec32d9334f970f332b192f7754df2d84c0fa9f17b45cd579c07af5c8f9f20e8cdf2e
- SSDEEP
  
  24576:wJVL0JiEy2lP4DHmGOBO+yUQvjwTUv8TrEcz:wJl0JigGmGYQvkw+z
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan