761ff3f2d4c8b9d94558d19f031cf282cf7e3abacd903c39ca72ec4214356100 | Triage

Sharing

General

Target

Windows实用设置工具3.6.5.1.exe
Size

292KB
Sample

240928-nhnpjatarr
MD5

dde3ece39e280822e1bae15d33fb3ecd
SHA1

122bae620f57fc5b67d819045d870bd4f8962133
SHA256

761ff3f2d4c8b9d94558d19f031cf282cf7e3abacd903c39ca72ec4214356100
SHA512

7b50326812986c6d55019fc4d3bb1b261638cf8d632282edf4f7dc6198381694d0cd4aa634f3a2ae0132a1d2d1a95569efdef9840e1d6d61963a2312879ba38c
SSDEEP

6144:lpyX4T8ef7VVe8rxxnDUofaKrxxnDUoq5:rI4zK8MofaKMoq5

Score

6^/10

evasion trojan

Malware Config

Targets

- Target
  
  Windows实用设置工具3.6.5.1.exe
- Size
  
  292KB
- MD5
  
  dde3ece39e280822e1bae15d33fb3ecd
- SHA1
  
  122bae620f57fc5b67d819045d870bd4f8962133
- SHA256
  
  761ff3f2d4c8b9d94558d19f031cf282cf7e3abacd903c39ca72ec4214356100
- SHA512
  
  7b50326812986c6d55019fc4d3bb1b261638cf8d632282edf4f7dc6198381694d0cd4aa634f3a2ae0132a1d2d1a95569efdef9840e1d6d61963a2312879ba38c
- SSDEEP
  
  6144:lpyX4T8ef7VVe8rxxnDUofaKrxxnDUoq5:rI4zK8MofaKMoq5
Score

6^/10

evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2