84bde632c5bfd2a7ff84e579e6f7561543ca0aad6d8e7275dae5926ba4f561c1 | Triage

Resubmissions

25/03/2024, 15:38

240325-s3dsaaeg8s 7

25/03/2024, 15:33

240325-szkresbh35 7

25/03/2024, 15:32

240325-syn3fsbg93 6

25/03/2024, 15:22

240325-sr38ssbf42 7

25/03/2024, 14:59

240325-scrlfseb3t 7

Sharing

General

Target

ovisetup.exe
Size

4.4MB
Sample

240325-syn3fsbg93
MD5

1692aec61ddcdda471defa199c62d25a
SHA1

484af221468ddb534b74e12970de80d5dfee2b28
SHA256

84bde632c5bfd2a7ff84e579e6f7561543ca0aad6d8e7275dae5926ba4f561c1
SHA512

19155d0770fc0931ab8ac1bf35f56b32c8c122379adac6866b07cebec28932f92be124638cd7bb9fdaff5edd091f3af0c1fbd0757a99de44e24f11214f13329a
SSDEEP

49152:9Hox6U/D1LbDxklrSWZAhizWV4yFK73bBxaaNNG0pHSdtDLboHTBWpHg6UvM98IQ:2x6qaAVpchNG0pHA57HgR

Score

6^/10

evasion trojan

Malware Config

Targets

- Target
  
  ovisetup.exe
- Size
  
  4.4MB
- MD5
  
  1692aec61ddcdda471defa199c62d25a
- SHA1
  
  484af221468ddb534b74e12970de80d5dfee2b28
- SHA256
  
  84bde632c5bfd2a7ff84e579e6f7561543ca0aad6d8e7275dae5926ba4f561c1
- SHA512
  
  19155d0770fc0931ab8ac1bf35f56b32c8c122379adac6866b07cebec28932f92be124638cd7bb9fdaff5edd091f3af0c1fbd0757a99de44e24f11214f13329a
- SSDEEP
  
  49152:9Hox6U/D1LbDxklrSWZAhizWV4yFK73bBxaaNNG0pHSdtDLboHTBWpHg6UvM98IQ:2x6qaAVpchNG0pHA57HgR
Score

6^/10

evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1