2301b497546954f26ffdd8b5d11deaca8ec80ff71c2dfdf13ecd762b671c470c | Triage

Sharing

General

Target

4178015de3294c9a93614454e46e4bfa
Size

1.1MB
Sample

240104-vyjh3sgdc2
MD5

4178015de3294c9a93614454e46e4bfa
SHA1

6cad3ba002e51681e0106a572b0b98e3dfb36cb8
SHA256

2301b497546954f26ffdd8b5d11deaca8ec80ff71c2dfdf13ecd762b671c470c
SHA512

707c646b24c53887e9bd50a667fa8a3239a869e731d0879cf86487c2541097ad30a74d9ee0be42728314f9eb5e982e60d728972ec29d2a6b5b9291a2c68576da
SSDEEP

12288:lFAFbTUzIDIH5LIisK0e3GuSGcysoWT6Nbq2xUIIm+AhVZAykJmzW91f0p9P6yi8:ANgBsKDWRrrmNL+yK5z0X6ojRPf4Ri7

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  4178015de3294c9a93614454e46e4bfa
- Size
  
  1.1MB
- MD5
  
  4178015de3294c9a93614454e46e4bfa
- SHA1
  
  6cad3ba002e51681e0106a572b0b98e3dfb36cb8
- SHA256
  
  2301b497546954f26ffdd8b5d11deaca8ec80ff71c2dfdf13ecd762b671c470c
- SHA512
  
  707c646b24c53887e9bd50a667fa8a3239a869e731d0879cf86487c2541097ad30a74d9ee0be42728314f9eb5e982e60d728972ec29d2a6b5b9291a2c68576da
- SSDEEP
  
  12288:lFAFbTUzIDIH5LIisK0e3GuSGcysoWT6Nbq2xUIIm+AhVZAykJmzW91f0p9P6yi8:ANgBsKDWRrrmNL+yK5z0X6ojRPf4Ri7
Score

7^/10

discovery evasion persistence trojan
- Drops startup file
- Loads dropped DLL
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan