Overview

overview

6

Static

static

1

TOTALCMD64.exe

windows11-21h2-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TOTALCMD64.EXE

  • Size

    9.9MB

  • Sample

    240613-qk7arsvbpl

  • MD5

    010b1b115950c530717128a665f090ee

  • SHA1

    bdabfdfc91f6ad541da2c6cd4a7abcb59f3e72c6

  • SHA256

    aa7d04a9fad39fb4745804a90489ef5c283b9ec780d8f577106042c9e0ed78eb

  • SHA512

    f52e2389dddc3d24ce64345a347813b6eed455e24d11c50fe31f0c197f36732bc0657e88bfb1f6abc3fbee60605e48cc7398d2bfb94733a5a11cbd2274779dd6

  • SSDEEP

    98304:GtDMW/M1cWwyPIicHQDXiCjyWTg0enT3nXLhiGffxXyxFVr+HY:uDzIPxPncoXiv0eTcGff4PFN

Score
6/10
evasiontrojan

Malware Config

Targets

    • Target

      TOTALCMD64.EXE

    • Size

      9.9MB

    • MD5

      010b1b115950c530717128a665f090ee

    • SHA1

      bdabfdfc91f6ad541da2c6cd4a7abcb59f3e72c6

    • SHA256

      aa7d04a9fad39fb4745804a90489ef5c283b9ec780d8f577106042c9e0ed78eb

    • SHA512

      f52e2389dddc3d24ce64345a347813b6eed455e24d11c50fe31f0c197f36732bc0657e88bfb1f6abc3fbee60605e48cc7398d2bfb94733a5a11cbd2274779dd6

    • SSDEEP

      98304:GtDMW/M1cWwyPIicHQDXiCjyWTg0enT3nXLhiGffxXyxFVr+HY:uDzIPxPncoXiv0eTcGff4PFN

    Score
    6/10
    evasiontrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks