4b70ac38e9af86c40c4af13a5285787a4b02d03728127a0449480dc1a85138b6 | Triage

Sharing

General

Target

4b70ac38e9af86c40c4af13a5285787a4b02d03728127a0449480dc1a85138b6
Size

3.9MB
Sample

241120-ekdgxavpej
MD5

e6faf00438cb1321e26eb56b2ec4d2a5
SHA1

1937246182669d76e5d514b640083dd4c0752f88
SHA256

4b70ac38e9af86c40c4af13a5285787a4b02d03728127a0449480dc1a85138b6
SHA512

36cae46936c794f732231e36383faccfa309271f5a7806aa1202d1dbec1bfa1842a3fd5e84191195fa82b27b14748b8fc77ab96e07bcc061e6e3754c230b5d56
SSDEEP

98304:utPCIdUInaFOat7ZYyiKFFBZTcmBhAu6ssHGuf:6ndUZHZY/hm8FssHGuf

Score

6^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  Wise Registry Cleaner 11.1.8.723 专业版（单文件） - 20241119.exe
- Size
  
  3.9MB
- MD5
  
  019025a860dec4675a481b4a388c3288
- SHA1
  
  718c752fb4e771dbe9d2cebde7b7a48d743031df
- SHA256
  
  cc288c7883d357d45b92b823eda720b62d3c30a8cd26fec639cdabae82eb09fb
- SHA512
  
  665bd727dfdec1b7147a51c43c5b72c6110fff5b4cc5f1e73686a72954777eea36c191f2e1c22d5bad898553b5abd64548c6e4792bcc7d05fb082e647bc22093
- SSDEEP
  
  98304:StPCIdUInaFOat7ZYyiKFFBZTcmBhAu6ssHGu4:OndUZHZY/hm8FssHGu4
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  qiuquan.cc.url
- Size
  
  38B
- MD5
  
  c599dc1d7ac6042efffc42c2b94da34b
- SHA1
  
  3a7db43d5c2c99a0c1dbea50454a44ab9048e8d2
- SHA256
  
  4c6fd5557f2c4a413420df59d2019409224236b3e10708bd106187c221e010c7
- SHA512
  
  c8c973bf18bdd8e001cffb703a609fc241ac5dcec9f9b5af3daa590eec80ba0658d25e22f2fdc953c80259afb478be5387f0a9d7ae97637e48b1e93379fb4268
Score

6^/10

discovery evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryevasiontrojan

behavioral4