b01a3522c27ada01f63f37be9e2ccb0006f2536bad4dc31b4e042ca5a61dc1c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b01a3522c27ada01f63f37be9e2ccb0006f2536bad4dc31b4e042ca5a61dc1c4
Size

878KB
Sample

221204-exa8bafb49
MD5

128a25332960436be68bb86a0f4ab692
SHA1

2dab2b689eccae137d505e883c92d0852aa17bb6
SHA256

b01a3522c27ada01f63f37be9e2ccb0006f2536bad4dc31b4e042ca5a61dc1c4
SHA512

a7e249e55f5b8c14b58d16a01822553664ac99f942c9a0c3e9347677c04cfe8bd02805f66bc467ef280c33378a862d227ba223ea2a66e6c7d32af91ccc7d2d37
SSDEEP

24576:AFFyyJWglfy8IZT/7FXBbmf6R+NZt5SKtdug9NJMoJmXf:EFyyJWglfy8IZT/7jmft8+duUJNJcf

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  b01a3522c27ada01f63f37be9e2ccb0006f2536bad4dc31b4e042ca5a61dc1c4
- Size
  
  878KB
- MD5
  
  128a25332960436be68bb86a0f4ab692
- SHA1
  
  2dab2b689eccae137d505e883c92d0852aa17bb6
- SHA256
  
  b01a3522c27ada01f63f37be9e2ccb0006f2536bad4dc31b4e042ca5a61dc1c4
- SHA512
  
  a7e249e55f5b8c14b58d16a01822553664ac99f942c9a0c3e9347677c04cfe8bd02805f66bc467ef280c33378a862d227ba223ea2a66e6c7d32af91ccc7d2d37
- SSDEEP
  
  24576:AFFyyJWglfy8IZT/7FXBbmf6R+NZt5SKtdug9NJMoJmXf:EFyyJWglfy8IZT/7jmft8+duUJNJcf
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2