af17d33317ea146ebb61a69031eead1092f34138b8417b51a3e9629e7fd04e71 | Triage

Sharing

General

Target

af17d33317ea146ebb61a69031eead1092f34138b8417b51a3e9629e7fd04e71
Size

1.8MB
Sample

221204-qsy95ada58
MD5

8f0b3cb5649dbd908de40662914eb0c3
SHA1

14609c0fc59f506e3202299f8b49620802d17be2
SHA256

af17d33317ea146ebb61a69031eead1092f34138b8417b51a3e9629e7fd04e71
SHA512

f9bf3ed778a57baac2414becf70ec019d4ecd2aabf4a815e29a1694239cec75b4c35f7a941162b819245153d981982e6fe240cdbd95023e1f11c96552577cd44
SSDEEP

24576:KWxhHS/BW9p8fAnXoJU0aWYTwrGJGjAaZXmwlEmL4LswAJxt3bLDGmS20sCUVauX:aIeIN0384jPFNlE0S1gP3TGW09Do

Score

6^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  af17d33317ea146ebb61a69031eead1092f34138b8417b51a3e9629e7fd04e71
- Size
  
  1.8MB
- MD5
  
  8f0b3cb5649dbd908de40662914eb0c3
- SHA1
  
  14609c0fc59f506e3202299f8b49620802d17be2
- SHA256
  
  af17d33317ea146ebb61a69031eead1092f34138b8417b51a3e9629e7fd04e71
- SHA512
  
  f9bf3ed778a57baac2414becf70ec019d4ecd2aabf4a815e29a1694239cec75b4c35f7a941162b819245153d981982e6fe240cdbd95023e1f11c96552577cd44
- SSDEEP
  
  24576:KWxhHS/BW9p8fAnXoJU0aWYTwrGJGjAaZXmwlEmL4LswAJxt3bLDGmS20sCUVauX:aIeIN0384jPFNlE0S1gP3TGW09Do
Score

6^/10

evasion persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan