df9a7d7a30cb6d60d0c5efc1ac052d664983f04c137a1be43a477cd08660686c | Triage

Sharing

General

Target

GrammarlyAddInSetup.exe
Size

14.1MB
Sample

240319-jvfr8seb96
MD5

6e7521d5ed304ee64a9eea0233b1331a
SHA1

4d6f4f35defc0385c2b375e7e63c8fc347bc5faa
SHA256

df9a7d7a30cb6d60d0c5efc1ac052d664983f04c137a1be43a477cd08660686c
SHA512

91f8dbc82c07573bc77e6752dd54a5da93e44b416e4eaac5be841e0f1c2eb11f4d2de76d5209ed308a8d5d136e26070eb63a9da3f0c3837dfc1f92d8c09f81d8
SSDEEP

393216:znc60u4ShklUsF0aNhRp138y4CZy0TZgQ9b/6NzrFKSlioSnpwZVkDw:zc696Z77b4MySjd6hNipqzZ

Score

6^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  GrammarlyAddInSetup.exe
- Size
  
  14.1MB
- MD5
  
  6e7521d5ed304ee64a9eea0233b1331a
- SHA1
  
  4d6f4f35defc0385c2b375e7e63c8fc347bc5faa
- SHA256
  
  df9a7d7a30cb6d60d0c5efc1ac052d664983f04c137a1be43a477cd08660686c
- SHA512
  
  91f8dbc82c07573bc77e6752dd54a5da93e44b416e4eaac5be841e0f1c2eb11f4d2de76d5209ed308a8d5d136e26070eb63a9da3f0c3837dfc1f92d8c09f81d8
- SSDEEP
  
  393216:znc60u4ShklUsF0aNhRp138y4CZy0TZgQ9b/6NzrFKSlioSnpwZVkDw:zc696Z77b4MySjd6hNipqzZ
Score

6^/10

discovery evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan