Overview

overview

7

Static

static

LIST OF PR...at.exe

windows7_x64

7

LIST OF PR...at.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LIST OF PRODUCTS AND SPECIFICATIONS.bat.exe

  • Size

    347KB

  • Sample

    200630-zmr6l5ym3a

  • MD5

    1d2585eb104895bd6a4059cee636cee7

  • SHA1

    79437779f16915a20a5a38a768242427eed08401

  • SHA256

    1bf9db8285719827160844a6a51292c30346c3099a4753c92177cba4e59b2404

  • SHA512

    b5733f78528110f8f04c0df961f38a974d04a888a9b920ad48758954fadfa5a43d46106537dbfa9877acd25d58631d9c1cd4ffac709f13f7ad6ea43869b9d201

Score
7/10
evasiontrojan

Malware Config

Targets

    • Target

      LIST OF PRODUCTS AND SPECIFICATIONS.bat.exe

    • Size

      347KB

    • MD5

      1d2585eb104895bd6a4059cee636cee7

    • SHA1

      79437779f16915a20a5a38a768242427eed08401

    • SHA256

      1bf9db8285719827160844a6a51292c30346c3099a4753c92177cba4e59b2404

    • SHA512

      b5733f78528110f8f04c0df961f38a974d04a888a9b920ad48758954fadfa5a43d46106537dbfa9877acd25d58631d9c1cd4ffac709f13f7ad6ea43869b9d201

    Score
    7/10
    evasiontrojan

    • Deletes itself

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks