955d5d2bf1cd67196b174dde14c9871b37c72b08777915836cb246b86e3e68ba | Triage

Sharing

General

Target

4cd0aa65d375f9edb94986ff5785834d
Size

200KB
Sample

240109-ael5msgcan
MD5

4cd0aa65d375f9edb94986ff5785834d
SHA1

8c3a4811588a9281011542decd827daf028eb4f2
SHA256

955d5d2bf1cd67196b174dde14c9871b37c72b08777915836cb246b86e3e68ba
SHA512

07423da446e8dd68873028336a1420567a633646142ce63e7498f60ef94f36b1303c2e8a71ac126300a51a086e58e3126a54b8c2a585a07dd6f05449ac616ace
SSDEEP

6144:jD/SXeNQCJXtEpIE5nVWJVErxIgldFaobgVl:iuNtJXjE5nV2VSldFaobgVl

Score

8^/10

evasion trojan

Malware Config

Targets

- Target
  
  4cd0aa65d375f9edb94986ff5785834d
- Size
  
  200KB
- MD5
  
  4cd0aa65d375f9edb94986ff5785834d
- SHA1
  
  8c3a4811588a9281011542decd827daf028eb4f2
- SHA256
  
  955d5d2bf1cd67196b174dde14c9871b37c72b08777915836cb246b86e3e68ba
- SHA512
  
  07423da446e8dd68873028336a1420567a633646142ce63e7498f60ef94f36b1303c2e8a71ac126300a51a086e58e3126a54b8c2a585a07dd6f05449ac616ace
- SSDEEP
  
  6144:jD/SXeNQCJXtEpIE5nVWJVErxIgldFaobgVl:iuNtJXjE5nV2VSldFaobgVl
Score

8^/10

evasion trojan
- Modifies Windows Firewall
  evasion
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2