industroyer | b419c5513da8670138292c70e290d8090ed493995d306e6b053bbff3acd49f3d | Triage

Submit
Reports

Overview

overview

Static

static

6

IDA_Pro_9....in.rar

windows10-2004-x64

Sharing

General

Target

IDA_Pro_9.0.240925_win.rar
Size

706.4MB
Sample

241115-hxszxa1apd
MD5

95df884fca01edd66d83143eee1118c2
SHA1

2cc4400e1d1e3891e274dc7355feb70cafe145be
SHA256

b419c5513da8670138292c70e290d8090ed493995d306e6b053bbff3acd49f3d
SHA512

f0777e59c40b3aa45cd2db389843278c08cb10bfc7c1e659d7630f8187e572c53559636f98eeb05cb3bf0c432c66e97747f84b6caf90e567cfda01922641e73b
SSDEEP

12582912:f6zE1nV+AqK/3qajtO6DHxrN0BDzWM9LiKaQ4OLeXheDJzzwns9D:izED3jP5fX0F244OCxyKi

Score

10^/10

industroyer discovery evasion link pdf persistence trojan

Static task

static1

pdf link evasion

4 signatures

Behavioral task

behavioral1

Sample

IDA_Pro_9.0.240925_win.rar

Resource

win10v2004-20241007-en

industroyer discovery evasion persistence trojan

windows10-2004-x64

26 signatures

1800 seconds

Malware Config

Targets

- Target
  
  IDA_Pro_9.0.240925_win.rar
- Size
  
  706.4MB
- MD5
  
  95df884fca01edd66d83143eee1118c2
- SHA1
  
  2cc4400e1d1e3891e274dc7355feb70cafe145be
- SHA256
  
  b419c5513da8670138292c70e290d8090ed493995d306e6b053bbff3acd49f3d
- SHA512
  
  f0777e59c40b3aa45cd2db389843278c08cb10bfc7c1e659d7630f8187e572c53559636f98eeb05cb3bf0c432c66e97747f84b6caf90e567cfda01922641e73b
- SSDEEP
  
  12582912:f6zE1nV+AqK/3qajtO6DHxrN0BDzWM9LiKaQ4OLeXheDJzzwns9D:izED3jP5fX0F244OCxyKi
Score

10^/10

industroyer discovery evasion persistence trojan
- Industroyer
  Contains code associated with parsing industroyer's configuration file.
- Industroyer family
  industroyer
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

industroyerdiscoveryevasionpersistencetrojan

© 2018-2024

Terms | Privacy