3da8fa82f62835bcf35377d5376e002aeccff9228bd65650bbb95a6a222808af | Triage

Sharing

General

Target

new po.exe
Size

3.7MB
Sample

210118-hz6381npge
MD5

db7c5591589c1bc7be457ad87d8fff0e
SHA1

065fbdf5b64cc5c9cf4f983f229a89d7252f62a6
SHA256

3da8fa82f62835bcf35377d5376e002aeccff9228bd65650bbb95a6a222808af
SHA512

17d5604178dc9789e107a17d07cc43132676d51ff29205f802f59a2b2c0d09dc72b87099be6d2ec1975999ee5ff88ffda9d168d44ad429745999a42e3758d2dc

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  new po.exe
- Size
  
  3.7MB
- MD5
  
  db7c5591589c1bc7be457ad87d8fff0e
- SHA1
  
  065fbdf5b64cc5c9cf4f983f229a89d7252f62a6
- SHA256
  
  3da8fa82f62835bcf35377d5376e002aeccff9228bd65650bbb95a6a222808af
- SHA512
  
  17d5604178dc9789e107a17d07cc43132676d51ff29205f802f59a2b2c0d09dc72b87099be6d2ec1975999ee5ff88ffda9d168d44ad429745999a42e3758d2dc
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2