industroyer | 4058fb9bdb56658b82ed2b4d1d5bafd45fbfd4cecb671d7cb4087352bf6f2155 | Triage

Submit
Reports

Overview

overview

Static

static

1

idapro_90_x64win.exe

windows7-x64

4

idapro_90_x64win.exe

windows10-2004-x64

Sharing

General

Target

idapro_90_x64win.exe
Size

462.9MB
Sample

241203-da7gkawmht
MD5

18565723b9ebc49e042c6f80bb9f5c1e
SHA1

890b5dc50e4b8bd4e50e21a3f104852e7e7e1a86
SHA256

4058fb9bdb56658b82ed2b4d1d5bafd45fbfd4cecb671d7cb4087352bf6f2155
SHA512

d0c707f909fe7a3583797a8e2bdf93f52b985080b7ca65a200fdcec361b3ddaa876e6b45ee59a6eb9b7646a486665f7e121eff5b3c07f9606cbd26a068f6eaa7
SSDEEP

12582912:1z5tDgM1g2NU1A9FxtCypOOZsZquwbxvPEvqNFLblJ/i:1z5tssg2N+K/ObquGJPpVlJ/

Score

10^/10

industroyer discovery evasion persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

idapro_90_x64win.exe

Resource

win7-20240903-en

discovery evasion trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

idapro_90_x64win.exe

Resource

win10v2004-20241007-en

industroyer discovery evasion persistence trojan

windows10-2004-x64

20 signatures

150 seconds

Malware Config

Targets

- Target
  
  idapro_90_x64win.exe
- Size
  
  462.9MB
- MD5
  
  18565723b9ebc49e042c6f80bb9f5c1e
- SHA1
  
  890b5dc50e4b8bd4e50e21a3f104852e7e7e1a86
- SHA256
  
  4058fb9bdb56658b82ed2b4d1d5bafd45fbfd4cecb671d7cb4087352bf6f2155
- SHA512
  
  d0c707f909fe7a3583797a8e2bdf93f52b985080b7ca65a200fdcec361b3ddaa876e6b45ee59a6eb9b7646a486665f7e121eff5b3c07f9606cbd26a068f6eaa7
- SSDEEP
  
  12582912:1z5tDgM1g2NU1A9FxtCypOOZsZquwbxvPEvqNFLblJ/i:1z5tssg2N+K/ObquGJPpVlJ/
Score

10^/10

discovery evasion trojan industroyer persistence
- Industroyer
  Contains code associated with parsing industroyer's configuration file.
- Industroyer family
  industroyer
- Event Triggered Execution: Image File Execution Options Injection
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

industroyerdiscoveryevasionpersistencetrojan

© 2018-2024

Terms | Privacy