fba5612ed177354569658bbdb7fa377c9e14beaf6f048ac7e06356e50eb705ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8949cb8d89ff5f00c632ffab6ccd2557
Size

654KB
Sample

240202-mmbebseadj
MD5

8949cb8d89ff5f00c632ffab6ccd2557
SHA1

388b53db496665a472ce89cd5e8bdd9f11a858f1
SHA256

fba5612ed177354569658bbdb7fa377c9e14beaf6f048ac7e06356e50eb705ab
SHA512

5aefd242922c3a128c0915e101d8ede0550797167cb4c75b1f9ea0afc4f60b3688658f789a72a5ba1af6210379a0d25c6856d5039a0b6d1afa40dd29a162fde1
SSDEEP

12288:W7l0RPYJxekbujnCPn1P9dkrQkazv4EP+e/F8Ljv5hAsVwh7lJ+xuGAvBxaWS:W7eZ2x7KnAL7aLdhA5/QfAv4

Score

8^/10

evasion trojan

Malware Config

Targets

- Target
  
  8949cb8d89ff5f00c632ffab6ccd2557
- Size
  
  654KB
- MD5
  
  8949cb8d89ff5f00c632ffab6ccd2557
- SHA1
  
  388b53db496665a472ce89cd5e8bdd9f11a858f1
- SHA256
  
  fba5612ed177354569658bbdb7fa377c9e14beaf6f048ac7e06356e50eb705ab
- SHA512
  
  5aefd242922c3a128c0915e101d8ede0550797167cb4c75b1f9ea0afc4f60b3688658f789a72a5ba1af6210379a0d25c6856d5039a0b6d1afa40dd29a162fde1
- SSDEEP
  
  12288:W7l0RPYJxekbujnCPn1P9dkrQkazv4EP+e/F8Ljv5hAsVwh7lJ+xuGAvBxaWS:W7eZ2x7KnAL7aLdhA5/QfAv4
Score

8^/10

evasion trojan
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2