2ad336f1a79e664d660637aa1da1208c13df298bff0e7b00ee22246532928fa5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-26_6e2f3b48e83f5a084a2e04cd5f6641de_avoslocker
Size

4.5MB
Sample

240826-gflc3axhpf
MD5

6e2f3b48e83f5a084a2e04cd5f6641de
SHA1

50a7c564713f2815e1c9689a267f5016e7b10b24
SHA256

2ad336f1a79e664d660637aa1da1208c13df298bff0e7b00ee22246532928fa5
SHA512

55a98187d3a9bf316555479c21460d5d611bbabd76a3772c49425d7d7f15c23635f6a0f1c27c348338aab579ab4ad5245ec9ff0786f1e058dcb02763a209e182
SSDEEP

98304:FWqq+Mb+lyWvjIy5YFWAvwzn7Nx99JEIjFMm2Va/5AZK6j0xnw:FWagWvjIy5YPvwzn7N/rTAYAZK6jyw

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  2024-08-26_6e2f3b48e83f5a084a2e04cd5f6641de_avoslocker
- Size
  
  4.5MB
- MD5
  
  6e2f3b48e83f5a084a2e04cd5f6641de
- SHA1
  
  50a7c564713f2815e1c9689a267f5016e7b10b24
- SHA256
  
  2ad336f1a79e664d660637aa1da1208c13df298bff0e7b00ee22246532928fa5
- SHA512
  
  55a98187d3a9bf316555479c21460d5d611bbabd76a3772c49425d7d7f15c23635f6a0f1c27c348338aab579ab4ad5245ec9ff0786f1e058dcb02763a209e182
- SSDEEP
  
  98304:FWqq+Mb+lyWvjIy5YFWAvwzn7Nx99JEIjFMm2Va/5AZK6j0xnw:FWagWvjIy5YPvwzn7N/rTAYAZK6jyw
Score

7^/10

discovery evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan