56055b9e7bc2e6577527cb86ca9e8598fa7caf9a909bbdb3e69b27a2236c9da9 | Triage™

Login
Reports

Overview

overview

Static

static

Payment Ad...df.exe

windows7_x64

3

Payment Ad...df.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
Payment Advice copy 000030,pdf.exe
Size 3.3MB
Sample210802-nryxp1l56s
SHA256 56055b9e7bc2e6577527cb86ca9e8598fa7caf9a909bbdb3e69b27a2236c9da9
MD5 ae687391859bad88072fd1a6fd1fd7dc
SHA1 7f69986f9fa5eeb942c984e62124674ff6322d47
SHA512 4570a3ce945050cad351bd5f6b5ce5f6d0a1b44ee7f00874ecbd45317257dfdb671d0d69f1677bfa572fe5b062f8ab5ef9cf62a7d3f8ae4da367cddd8cb0477f
MD5 SHA1 SHA512

Score

10^/10

evasion trojan

Static task

static1

Behavioral task

behavioral1

Sample

Payment Advice copy 000030,pdf.exe

Resource

win7v20210410

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Payment Advice copy 000030,pdf.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  Payment Advice copy 000030,pdf.exe
- Size 3.3MB
- SHA256 56055b9e7bc2e6577527cb86ca9e8598fa7caf9a909bbdb3e69b27a2236c9da9
- MD5 ae687391859bad88072fd1a6fd1fd7dc
- SHA1 7f69986f9fa5eeb942c984e62124674ff6322d47
- SHA512 4570a3ce945050cad351bd5f6b5ce5f6d0a1b44ee7f00874ecbd45317257dfdb671d0d69f1677bfa572fe5b062f8ab5ef9cf62a7d3f8ae4da367cddd8cb0477f
- MD5 SHA1 SHA512
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Bypass User Account Control

Scheduled Task

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2026

Terms | Privacy