Overview

overview

6

Static

static

1

2024-05-23...ke.exe

windows7-x64

6

2024-05-23...ke.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_385d407abb78767b5d6f67b5a3492742_avoslocker_cobalt-strike

  • Size

    495KB

  • Sample

    240523-b6tjgahb7w

  • MD5

    385d407abb78767b5d6f67b5a3492742

  • SHA1

    c1b8e1cca335ff6beab36ca1994e42a69506c85a

  • SHA256

    498ccb5e245b4a20f8a4aa7bd236fae1e017809b399bb810bc803fd6cb59ff1e

  • SHA512

    19abac3c6931e1d0176cf06d93e5c6e6d5e580fb3aa6ac41e9bbd45ec2b9bafd51e48a111035d67e28cbb113d09d4f0852b4161d13f4f8b62a3d74cc83229a7d

  • SSDEEP

    6144:g7WQ0j4ltziolIGlnE2deWdrlBu0R+J5JlLgPYfq8ZF02IlLZD30nXes2H:Ii4lZiopdfu0R+J5JlLgPbD30nF2H

Score
6/10
evasiontrojan

Malware Config

Targets

    • Target

      2024-05-23_385d407abb78767b5d6f67b5a3492742_avoslocker_cobalt-strike

    • Size

      495KB

    • MD5

      385d407abb78767b5d6f67b5a3492742

    • SHA1

      c1b8e1cca335ff6beab36ca1994e42a69506c85a

    • SHA256

      498ccb5e245b4a20f8a4aa7bd236fae1e017809b399bb810bc803fd6cb59ff1e

    • SHA512

      19abac3c6931e1d0176cf06d93e5c6e6d5e580fb3aa6ac41e9bbd45ec2b9bafd51e48a111035d67e28cbb113d09d4f0852b4161d13f4f8b62a3d74cc83229a7d

    • SSDEEP

      6144:g7WQ0j4ltziolIGlnE2deWdrlBu0R+J5JlLgPYfq8ZF02IlLZD30nXes2H:Ii4lZiopdfu0R+J5JlLgPbD30nF2H

    Score
    6/10
    evasiontrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

4
T1082

Query Registry

2
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks