b021dadc8ba272307a8b1b7d3734e851bc40c4dfcdc81485f2d3c31b8e22b9a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b021dadc8ba272307a8b1b7d3734e851bc40c4dfcdc81485f2d3c31b8e22b9a8
Size

836KB
Sample

221204-elnn9sec86
MD5

3a1ca3cb7f8f48763e3c9a26d89f48b1
SHA1

2fc0a46b45b6d5733bf08f6fd0e92e34037ee573
SHA256

b021dadc8ba272307a8b1b7d3734e851bc40c4dfcdc81485f2d3c31b8e22b9a8
SHA512

073aa47d28bb5fe3f7f081d4ba08a6ee731dba9f7d02a5f3759d532942fa8b760b377701bb4634c09c57ca9881038008e9b6a650d964652fd9a741f6aa4b9296
SSDEEP

24576:FO1tLjjy/jTR30kgSoAqHtIpExGABBfGqFUN:FEnjSW93NtIni98N

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  b021dadc8ba272307a8b1b7d3734e851bc40c4dfcdc81485f2d3c31b8e22b9a8
- Size
  
  836KB
- MD5
  
  3a1ca3cb7f8f48763e3c9a26d89f48b1
- SHA1
  
  2fc0a46b45b6d5733bf08f6fd0e92e34037ee573
- SHA256
  
  b021dadc8ba272307a8b1b7d3734e851bc40c4dfcdc81485f2d3c31b8e22b9a8
- SHA512
  
  073aa47d28bb5fe3f7f081d4ba08a6ee731dba9f7d02a5f3759d532942fa8b760b377701bb4634c09c57ca9881038008e9b6a650d964652fd9a741f6aa4b9296
- SSDEEP
  
  24576:FO1tLjjy/jTR30kgSoAqHtIpExGABBfGqFUN:FEnjSW93NtIni98N
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan