Overview

overview

8

Static

static

tasks_196.vir.exe

windows7_x64

8

tasks_196.vir.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tasks_196.vir

  • Size

    229KB

  • Sample

    200719-9cj93l6mrs

  • MD5

    5bfda10184fb2ea0246db7f121bb9b22

  • SHA1

    b22541ca672cb19b440e222133da6f220fa9027e

  • SHA256

    6771d8d0431034fdd65f892475bfb38597457ccb65a7b2d46dd37579e22ebd4d

  • SHA512

    08bfa9e2ac0ae48186fb7705da0a4ac80a9d10e131d4cccee1624f93cdc2d3c6878e81130c173171c8decc4ec8db4d46bfa225c513f518cf6d51b33907f1dbb0

Score
8/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      tasks_196.vir

    • Size

      229KB

    • MD5

      5bfda10184fb2ea0246db7f121bb9b22

    • SHA1

      b22541ca672cb19b440e222133da6f220fa9027e

    • SHA256

      6771d8d0431034fdd65f892475bfb38597457ccb65a7b2d46dd37579e22ebd4d

    • SHA512

      08bfa9e2ac0ae48186fb7705da0a4ac80a9d10e131d4cccee1624f93cdc2d3c6878e81130c173171c8decc4ec8db4d46bfa225c513f518cf6d51b33907f1dbb0

    Score
    8/10
    persistenceevasiontrojan

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks