18b3727b88db5f6ab9bcc52cf6ee2e10244f652ed5d534fa6239f9a6f3f8332b | Triage

Sharing

General

Target

2024-09-02_e07811af9f319acc1afd911c0b3598d2_avoslocker
Size

4.4MB
Sample

240902-f6xcksshkj
MD5

e07811af9f319acc1afd911c0b3598d2
SHA1

e1d73735bd750406ca5f73e47eeda2600a173784
SHA256

18b3727b88db5f6ab9bcc52cf6ee2e10244f652ed5d534fa6239f9a6f3f8332b
SHA512

1659ac67a42d688a83d0c0f8ac5d6a6b7b41fadc6db6211a93e290b789f2a86b10a7d16aeeb320211c7a23fb5ed17d00f7ceb848a2d3dddb34096f9df345ebf8
SSDEEP

98304:XWqq+Mb+uyWvdIy5YFWAvwznZyi/CMvZoN5Boinw:XWa/WvdIy5YPvwznZy4Cz5BTw

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  2024-09-02_e07811af9f319acc1afd911c0b3598d2_avoslocker
- Size
  
  4.4MB
- MD5
  
  e07811af9f319acc1afd911c0b3598d2
- SHA1
  
  e1d73735bd750406ca5f73e47eeda2600a173784
- SHA256
  
  18b3727b88db5f6ab9bcc52cf6ee2e10244f652ed5d534fa6239f9a6f3f8332b
- SHA512
  
  1659ac67a42d688a83d0c0f8ac5d6a6b7b41fadc6db6211a93e290b789f2a86b10a7d16aeeb320211c7a23fb5ed17d00f7ceb848a2d3dddb34096f9df345ebf8
- SSDEEP
  
  98304:XWqq+Mb+uyWvdIy5YFWAvwznZyi/CMvZoN5Boinw:XWa/WvdIy5YPvwznZy4Cz5BTw
Score

7^/10

discovery evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan