Managed XDR

malware-samples-master...20769982d28107db370513 (Regin) — malware analysis report

File info

Filename
malware-samples-master-thezoo-master-malware-binaries-trojan.regin-c0cf8e008fbfa0cb2c61d968057b4a077d62f64d7320769982d28107db370513
File type
PE32 executable (DLL) (native) Intel 80386, for MS Windows
File size
12.5 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
f8645b71b2cb515278d3802924642124f5ba9b7d
SHA256
c0cf8e008fbfa0cb2c61d968057b4a077d62f64d7320769982d28107db370513
MD5
1c024e599ac055312a4ab75b3950040a

Malwares

  • Regin

Signatures

Persistence

T1574 dropper_dll: Creates DLL, which is then loaded into the process

Privilege Escalation

T1574 dropper_dll: Creates DLL, which is then loaded into the process
T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1574 dropper_dll: Creates DLL, which is then loaded into the process
T1134 opens_thread_token: Opens the access token associated with a thread
T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
message_box: Displays a message

Related reports