42a4709c5380ba5be8dc7d18d6074a0738e8ed2f5c6a6909d78fd495d90f5bfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c1a40eb1ac1c4ab72be50b68f9ff4dd
Size

479KB
Sample

240115-eskwysaag7
MD5

5c1a40eb1ac1c4ab72be50b68f9ff4dd
SHA1

bcd8dc698d0e92bfb7631a5bd18f724cb0620043
SHA256

42a4709c5380ba5be8dc7d18d6074a0738e8ed2f5c6a6909d78fd495d90f5bfd
SHA512

b90af3a4d37923b1e70b11ebf5f6702234fe5fb8486e4f300cf182f07a6b1608a4bd3bb2367172519862509eec4f3f7bcc32c9e2cb07463d7d02e086897a1482
SSDEEP

12288:rtOzkjUBvCkfmvz756FGtkeSUknzp7tRuvftbOb8:RwkjUV5a75G0OtXggb8

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  5c1a40eb1ac1c4ab72be50b68f9ff4dd
- Size
  
  479KB
- MD5
  
  5c1a40eb1ac1c4ab72be50b68f9ff4dd
- SHA1
  
  bcd8dc698d0e92bfb7631a5bd18f724cb0620043
- SHA256
  
  42a4709c5380ba5be8dc7d18d6074a0738e8ed2f5c6a6909d78fd495d90f5bfd
- SHA512
  
  b90af3a4d37923b1e70b11ebf5f6702234fe5fb8486e4f300cf182f07a6b1608a4bd3bb2367172519862509eec4f3f7bcc32c9e2cb07463d7d02e086897a1482
- SSDEEP
  
  12288:rtOzkjUBvCkfmvz756FGtkeSUknzp7tRuvftbOb8:RwkjUV5a75G0OtXggb8
Score

7^/10

evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2