e08b0f9c969285959aff4b568da8f44a6de846ef355a20fdea956760b85eb59c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-18_a4b1d7cb9b1269b6ada2148dbf2ddab5_avoslocker_hijackloader
Size

4.4MB
Sample

240818-lhbzmazfmp
MD5

a4b1d7cb9b1269b6ada2148dbf2ddab5
SHA1

260f2f072a5dfa88a95bdd63575fb005d5ad1dce
SHA256

e08b0f9c969285959aff4b568da8f44a6de846ef355a20fdea956760b85eb59c
SHA512

e788eb99b1de551a57e90683483a1efc6aab9b096062bc677d38180e42fde843c65f51a75ba3052f01dde0cc87b58d56229a7f62b5bcfc973e914c50331eda58
SSDEEP

98304:IWqq+Mb+qyWvAIy5YFWAvwznpS8A4F6UZqHeVsDcJo9g3Hynwm:IWarWvAIy5YPvwznbLJFP25wm

Score

6^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  2024-08-18_a4b1d7cb9b1269b6ada2148dbf2ddab5_avoslocker_hijackloader
- Size
  
  4.4MB
- MD5
  
  a4b1d7cb9b1269b6ada2148dbf2ddab5
- SHA1
  
  260f2f072a5dfa88a95bdd63575fb005d5ad1dce
- SHA256
  
  e08b0f9c969285959aff4b568da8f44a6de846ef355a20fdea956760b85eb59c
- SHA512
  
  e788eb99b1de551a57e90683483a1efc6aab9b096062bc677d38180e42fde843c65f51a75ba3052f01dde0cc87b58d56229a7f62b5bcfc973e914c50331eda58
- SSDEEP
  
  98304:IWqq+Mb+qyWvAIy5YFWAvwznpS8A4F6UZqHeVsDcJo9g3Hynwm:IWarWvAIy5YPvwznbLJFP25wm
Score

6^/10

discovery evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan