af716dad9fc458b528b72e05a298b61d3fc83d63aafa2798646c49c5c18d8103 | Triage

Sharing

General

Target

af716dad9fc458b528b72e05a298b61d3fc83d63aafa2798646c49c5c18d8103
Size

877KB
Sample

221204-mjdehsaf59
MD5

22be0acfd2465eabbc8c824c4423ba04
SHA1

b27541f1cce44a3dcd0808bf61a9a391fb9130d7
SHA256

af716dad9fc458b528b72e05a298b61d3fc83d63aafa2798646c49c5c18d8103
SHA512

787a8623c5811ecb7876de756a63781ba65a247c921a1f122eeda16c15368a314df49522e659c7c3fba6d3876a86fa1003cecceefe1fa40b8b476d33dc47c10c
SSDEEP

24576:1HX4UTtysU8EPEe86bzksjBPgmXSFjwO8L:h4CtyGEPRZztPgnw3L

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  af716dad9fc458b528b72e05a298b61d3fc83d63aafa2798646c49c5c18d8103
- Size
  
  877KB
- MD5
  
  22be0acfd2465eabbc8c824c4423ba04
- SHA1
  
  b27541f1cce44a3dcd0808bf61a9a391fb9130d7
- SHA256
  
  af716dad9fc458b528b72e05a298b61d3fc83d63aafa2798646c49c5c18d8103
- SHA512
  
  787a8623c5811ecb7876de756a63781ba65a247c921a1f122eeda16c15368a314df49522e659c7c3fba6d3876a86fa1003cecceefe1fa40b8b476d33dc47c10c
- SSDEEP
  
  24576:1HX4UTtysU8EPEe86bzksjBPgmXSFjwO8L:h4CtyGEPRZztPgnw3L
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2