afdfd1d966499fddaa5d38c80863019d92f0ff5f22ca812f2ccbad04bdf32abb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afdfd1d966499fddaa5d38c80863019d92f0ff5f22ca812f2ccbad04bdf32abb
Size

809KB
Sample

221204-hdyq2saa9t
MD5

75bdbfd560722890b4c91912fdf9e2ac
SHA1

a44e3a59faed521ba95dbed68eaa4676c485f32e
SHA256

afdfd1d966499fddaa5d38c80863019d92f0ff5f22ca812f2ccbad04bdf32abb
SHA512

a87a258597e4fc20a9e68e5a534f6b762bd86f4573f522c7f271201f742a702d9629ada03d7ffb4116b369dd07dbac73af0e20014e5bb6e488103ecb2302b18b
SSDEEP

12288:PQsba935CZUHOn/7L9IjB7ssgtAhqwTPRvvPbMXUv+fcfglF:q935CZOOn/mlAsgGhhTPJPbMXUm0YlF

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  afdfd1d966499fddaa5d38c80863019d92f0ff5f22ca812f2ccbad04bdf32abb
- Size
  
  809KB
- MD5
  
  75bdbfd560722890b4c91912fdf9e2ac
- SHA1
  
  a44e3a59faed521ba95dbed68eaa4676c485f32e
- SHA256
  
  afdfd1d966499fddaa5d38c80863019d92f0ff5f22ca812f2ccbad04bdf32abb
- SHA512
  
  a87a258597e4fc20a9e68e5a534f6b762bd86f4573f522c7f271201f742a702d9629ada03d7ffb4116b369dd07dbac73af0e20014e5bb6e488103ecb2302b18b
- SSDEEP
  
  12288:PQsba935CZUHOn/7L9IjB7ssgtAhqwTPRvvPbMXUv+fcfglF:q935CZOOn/mlAsgGhhTPJPbMXUm0YlF
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan