Overview

overview

10

Static

static

3

idapro_90_x64win.exe

windows7-x64

10

idapro_90_x64win.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    idapro_90_x64win.exe

  • Size

    421.7MB

  • Sample

    250211-znhw1szmdz

  • MD5

    8583d7721daba98843c15d5280362f00

  • SHA1

    ae48b47dc10e80ee7b0879819b9893ad88485be4

  • SHA256

    4d360d83c01b5554e531e36719a215617247f90d2e2fc61c80841e033039b898

  • SHA512

    b6e90766fc159ba5fed4468bc2e16e94b8c4faf989adf4138a1f83f3a53fe57f9838ce708b3b1178b23a5aa9bfd7a74aa58e937ed0663fe481477d72070a9252

  • SSDEEP

    12582912:HbZ0vgh5tSwNU1A9extCypOOZsZquwbxvPEvqNY:7Zagh5tSwN+J/ObquGJPpY

Score
10/10
industroyerdefense_evasiondiscoverytrojan

Malware Config

Targets

    • Target

      idapro_90_x64win.exe

    • Size

      421.7MB

    • MD5

      8583d7721daba98843c15d5280362f00

    • SHA1

      ae48b47dc10e80ee7b0879819b9893ad88485be4

    • SHA256

      4d360d83c01b5554e531e36719a215617247f90d2e2fc61c80841e033039b898

    • SHA512

      b6e90766fc159ba5fed4468bc2e16e94b8c4faf989adf4138a1f83f3a53fe57f9838ce708b3b1178b23a5aa9bfd7a74aa58e937ed0663fe481477d72070a9252

    • SSDEEP

      12582912:HbZ0vgh5tSwNU1A9extCypOOZsZquwbxvPEvqNY:7Zagh5tSwN+J/ObquGJPpY

    Score
    10/10
    industroyerdefense_evasiondiscoverytrojan

    • Industroyer

      Contains code associated with parsing industroyer's configuration file.

    • Industroyer family

      industroyer

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      defense_evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks