afccb6c5f42f19af553ca380b1a0c7656ef585693a554fad9f90c29a64c32902 | Triage

Sharing

General

Target

afccb6c5f42f19af553ca380b1a0c7656ef585693a554fad9f90c29a64c32902
Size

887KB
Sample

221204-h8j65scd61
MD5

77977e5127632bee5623c531e829531b
SHA1

1619c44804bacf25914268c642e27963aa6ec942
SHA256

afccb6c5f42f19af553ca380b1a0c7656ef585693a554fad9f90c29a64c32902
SHA512

96c6f793d156393d4de2d10c63be4e8422c39ec00abab19e3c7e7983af5ab8b2061b7346aeb2a44c6eb3403bfc38ba5f38d92e6deeef3fde9057bbcb28cca5e1
SSDEEP

24576:0Fw9XbQzG54Co5492vPQNo7phHGZtqP8lxHf:0W92G85K2HQwTHr8Tf

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  afccb6c5f42f19af553ca380b1a0c7656ef585693a554fad9f90c29a64c32902
- Size
  
  887KB
- MD5
  
  77977e5127632bee5623c531e829531b
- SHA1
  
  1619c44804bacf25914268c642e27963aa6ec942
- SHA256
  
  afccb6c5f42f19af553ca380b1a0c7656ef585693a554fad9f90c29a64c32902
- SHA512
  
  96c6f793d156393d4de2d10c63be4e8422c39ec00abab19e3c7e7983af5ab8b2061b7346aeb2a44c6eb3403bfc38ba5f38d92e6deeef3fde9057bbcb28cca5e1
- SSDEEP
  
  24576:0Fw9XbQzG54Co5492vPQNo7phHGZtqP8lxHf:0W92G85K2HQwTHr8Tf
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2