af46513c4fb48059c0b81962ab0e70f26589d432e258cf2c72b18009e5cbf89d | Triage

Sharing

General

Target

af46513c4fb48059c0b81962ab0e70f26589d432e258cf2c72b18009e5cbf89d
Size

809KB
Sample

221204-n7pm5afh82
MD5

1bb19e1770dac9b7be66d42e980ca5fc
SHA1

03cdd3f07ec5fb7637005881aca508724dd2906c
SHA256

af46513c4fb48059c0b81962ab0e70f26589d432e258cf2c72b18009e5cbf89d
SHA512

e4cea229dd7bddde5ab604e8183c0cdddf3fa6e339d01052c1a8249aa39b28b9f78fb73d05c55bfcf33640aaed1eefda3f518272f2db8101c7ed3a09b5d8cc2a
SSDEEP

24576:mK0P3LVqaa4YX4WK0unTvBopCiMVOt4Rok2m:gPbVDg4WXunTupCicBRb2m

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  af46513c4fb48059c0b81962ab0e70f26589d432e258cf2c72b18009e5cbf89d
- Size
  
  809KB
- MD5
  
  1bb19e1770dac9b7be66d42e980ca5fc
- SHA1
  
  03cdd3f07ec5fb7637005881aca508724dd2906c
- SHA256
  
  af46513c4fb48059c0b81962ab0e70f26589d432e258cf2c72b18009e5cbf89d
- SHA512
  
  e4cea229dd7bddde5ab604e8183c0cdddf3fa6e339d01052c1a8249aa39b28b9f78fb73d05c55bfcf33640aaed1eefda3f518272f2db8101c7ed3a09b5d8cc2a
- SSDEEP
  
  24576:mK0P3LVqaa4YX4WK0unTvBopCiMVOt4Rok2m:gPbVDg4WXunTupCicBRb2m
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan