351a449d0905ba095b0c0703a8b9c8c93d1fca36d3b933d2b1c3acae14e97c41 | Triage

Sharing

General

Target

d6b596c643286ca8fa278aa4e714f1bc
Size

69KB
Sample

240319-v3sbsaad61
MD5

d6b596c643286ca8fa278aa4e714f1bc
SHA1

2d9f9c81e9bbe8cfdc3778cddf177ff740f63e32
SHA256

351a449d0905ba095b0c0703a8b9c8c93d1fca36d3b933d2b1c3acae14e97c41
SHA512

b5915b4eeea1e16b9c4d52297cf2c7de98dbff032aa0d75f9e6c61fd23b0ffdf1bf6afb12f8a99e507dda38ad524b8c2a50aec83d04a6afb28012a0564235f14
SSDEEP

768:pxjd+yIhtahtRizdgvvd7K0RxMC7rgnvQjXhsZQIavNuUdd7B8AsvJZH7sEn5IVd:pDxkg1BmC7rA6Xm6Nzr7SgLVd

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  d6b596c643286ca8fa278aa4e714f1bc
- Size
  
  69KB
- MD5
  
  d6b596c643286ca8fa278aa4e714f1bc
- SHA1
  
  2d9f9c81e9bbe8cfdc3778cddf177ff740f63e32
- SHA256
  
  351a449d0905ba095b0c0703a8b9c8c93d1fca36d3b933d2b1c3acae14e97c41
- SHA512
  
  b5915b4eeea1e16b9c4d52297cf2c7de98dbff032aa0d75f9e6c61fd23b0ffdf1bf6afb12f8a99e507dda38ad524b8c2a50aec83d04a6afb28012a0564235f14
- SSDEEP
  
  768:pxjd+yIhtahtRizdgvvd7K0RxMC7rgnvQjXhsZQIavNuUdd7B8AsvJZH7sEn5IVd:pDxkg1BmC7rA6Xm6Nzr7SgLVd
Score

7^/10

evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2