45a9880a1172385a56b043c1d312cdb04deac545fc1833c09d82fcd1e0cee406

General

Target
45a9880a1172385a56b043c1d312cdb04deac545fc1833c09d82fcd1e0cee406
Size 5.4MB
Sample260528-gvb3yah15x
SHA256 45a9880a1172385a56b043c1d312cdb04deac545fc1833c09d82fcd1e0cee406
MD5 95b1a2a129e4e693c382777f3382a6ee
SHA1 ce3fe52717ccd3b74dcaf857c20d6981d2d000df
SHA512 c9c8a1720f04649ff841f4b509adfaaa732b309fb9f9ade372ccfea2cb7bdd5ceba1a158c67e5401dd35239719805ec1a53db1665c81da5a7b7516c69d21e2bb
SSDEEP 98304:DmfOl+MRqv/VmwN4Sl5URgtoG9M/UVyujODaqNXKzFZjf/8ytwI0UpJ7V:DmCfc/NNzDxtoYMcVVODaqXQ8yt8UpJh
TLSH
T1644633FA4575BB1ED1FEE2F3D975CBB2259E29D708E648402339D7701804EA7A50383A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  946110ec-5ae4-4374-bfdf-b71e4510b4a4/ah_monitor/ah_monitor.exe
- Size 3.8MB
- SHA256 5f72ff3cbfcc505e80be3e6a86fab57f6506e6a655ebb36b521ffd430da7fbf0
- MD5 71d0d99c83cd156bdcb90d8b34b11e9e
- SHA1 03ce9e29fa87c735011734c06a2b377daa7f0002
- SHA512 dcbed302a8b901b9d365dbbbb04d5565ff9c8a2e74bd5c961fa5207c3b155830e0f4db1289e8faa5b47c12eb85a0eeda3d30274f066f6f006c56bbde94e4fb5e
- SSDEEP 98304:KdbnOMtvY2ed5LiNCPLCTHPvEi+SV4PGUHSAWgkS:hsY2ed5LwmAUlPNnk
- TLSH
  T151063383D201E611F683C13C377C969EFBAA96FB7EE154419980F7A494387B11AD808F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan upx
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  946110ec-5ae4-4374-bfdf-b71e4510b4a4/ah_monitor/engine/ah_monitor_cmd.exe
- Size 1.8MB
- SHA256 7964b189efc8b4dec5d3b048d20b1b4816aa6d495c49d08350e47e154fe63eac
- MD5 6b762923d151c14ca3c7f37c5aa11a4d
- SHA1 c10c27608f7807fd876482734bf88722ee00eba7
- SHA512 12d2b89e2217fce0d9bafeab063085df24587d30c2f538e52ad9f6c58b510caf52d6eeeeb149cedc8b04d8613794af815ae93e46f0a0d708053b9f73e651a0d8
- SSDEEP 24576:ofXQosHXfFcz+Czu/5lWgdJPCbvdGnVelyzOUtKI+AnxoiZudi+sP2ja+bta7moq:o9opCzuxlWgmbimPGHSVd/ft+Xs
- TLSH
  T1078533472661D90AC7B59330A35B1B047BBE927D0A5BC420A5894FEECD39CF2576BA03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4