14f7bf7b9a127c0c22c510b3742e33ace1b652f954a421424df4915f4effe2b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c573bae25d62cd0f7a70099719f6ca2
Size

1.0MB
Sample

240128-gttatsefbm
MD5

7c573bae25d62cd0f7a70099719f6ca2
SHA1

08ed2c84c97fbd4584289b28200abdab36cedf37
SHA256

14f7bf7b9a127c0c22c510b3742e33ace1b652f954a421424df4915f4effe2b0
SHA512

be4009d23f7ee515a881ec7f455ddaccdfbd1a752038efb8439c9d5b88294d1c1ab5d7950db22ce9b49eeb9dd92472dbe2b8ab0fcb19d596586e2002512d2cdc
SSDEEP

12288:yz/nFWhhEIR1D6BE/HemepWVDXzyTimHGggHF7lTrf2lNouRKcOKLxRatzV4mLve:C/Fd0Ga/SsXzb3TKfRKLKLnapuu1I

Score

7^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  7c573bae25d62cd0f7a70099719f6ca2
- Size
  
  1.0MB
- MD5
  
  7c573bae25d62cd0f7a70099719f6ca2
- SHA1
  
  08ed2c84c97fbd4584289b28200abdab36cedf37
- SHA256
  
  14f7bf7b9a127c0c22c510b3742e33ace1b652f954a421424df4915f4effe2b0
- SHA512
  
  be4009d23f7ee515a881ec7f455ddaccdfbd1a752038efb8439c9d5b88294d1c1ab5d7950db22ce9b49eeb9dd92472dbe2b8ab0fcb19d596586e2002512d2cdc
- SSDEEP
  
  12288:yz/nFWhhEIR1D6BE/HemepWVDXzyTimHGggHF7lTrf2lNouRKcOKLxRatzV4mLve:C/Fd0Ga/SsXzb3TKfRKLKLnapuu1I
Score

7^/10

discovery evasion persistence trojan
- Drops startup file
- Loads dropped DLL
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

evasionpersistencetrojan