aef7b86d584efd6c4f478472e4f4680f7d1aeccb230b8c8add3fbf44e4d0fedd | Triage

Sharing

General

Target

aef7b86d584efd6c4f478472e4f4680f7d1aeccb230b8c8add3fbf44e4d0fedd
Size

810KB
Sample

221204-r2lk3aha79
MD5

81ded146c1ce63c97f79aa7600106375
SHA1

6bbc794db626337519810f2e291b5bd5438804ed
SHA256

aef7b86d584efd6c4f478472e4f4680f7d1aeccb230b8c8add3fbf44e4d0fedd
SHA512

76edd733a74d3d13bc349778ec6324e5e14bb8ad1137ce2154182ebbc7f3d1687a85f86f6fb1e67662acf891c5537fc0dad15b69faa60453b2aa5c7bb405ebed
SSDEEP

24576:0RXhWDdioZFalYwx4hWU0i52N6YVBpg2tBY5kWd:IsDDFpRp2btBkvd

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  aef7b86d584efd6c4f478472e4f4680f7d1aeccb230b8c8add3fbf44e4d0fedd
- Size
  
  810KB
- MD5
  
  81ded146c1ce63c97f79aa7600106375
- SHA1
  
  6bbc794db626337519810f2e291b5bd5438804ed
- SHA256
  
  aef7b86d584efd6c4f478472e4f4680f7d1aeccb230b8c8add3fbf44e4d0fedd
- SHA512
  
  76edd733a74d3d13bc349778ec6324e5e14bb8ad1137ce2154182ebbc7f3d1687a85f86f6fb1e67662acf891c5537fc0dad15b69faa60453b2aa5c7bb405ebed
- SSDEEP
  
  24576:0RXhWDdioZFalYwx4hWU0i52N6YVBpg2tBY5kWd:IsDDFpRp2btBkvd
Score

8^/10

discovery evasion persistence trojan
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan