afcb3f330f03d2a4923853fb0a2ed0970a945658aa36fddb6d744dc9da7a5f48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afcb3f330f03d2a4923853fb0a2ed0970a945658aa36fddb6d744dc9da7a5f48
Size

889KB
Sample

221204-jajndsgh77
MD5

0214d7bd0a87166f71f0389b0331ee02
SHA1

0f3e95191aaf92422f1da6c7c7df552c99844656
SHA256

afcb3f330f03d2a4923853fb0a2ed0970a945658aa36fddb6d744dc9da7a5f48
SHA512

c55f4b3fda8705891a90c78a386f89a59fe3a6f35e2186b19592d74e5ba8d6a444a18b8b537cf71ff817704b92930a129fb160d3a503a32638349faefd1c8508
SSDEEP

24576:tX/y7WBuFPFcGDgdih/DOuCat8nBeLTolj:h/huB2GEdMOuoIsj

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  afcb3f330f03d2a4923853fb0a2ed0970a945658aa36fddb6d744dc9da7a5f48
- Size
  
  889KB
- MD5
  
  0214d7bd0a87166f71f0389b0331ee02
- SHA1
  
  0f3e95191aaf92422f1da6c7c7df552c99844656
- SHA256
  
  afcb3f330f03d2a4923853fb0a2ed0970a945658aa36fddb6d744dc9da7a5f48
- SHA512
  
  c55f4b3fda8705891a90c78a386f89a59fe3a6f35e2186b19592d74e5ba8d6a444a18b8b537cf71ff817704b92930a129fb160d3a503a32638349faefd1c8508
- SSDEEP
  
  24576:tX/y7WBuFPFcGDgdih/DOuCat8nBeLTolj:h/huB2GEdMOuoIsj
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2