835fce14e9e8a1024d0a220442bb7d48a0db8730317c84e91bde48cb6ee0603b | Triage

Sharing

General

Target

835fce14e9e8a1024d0a220442bb7d48a0db8730317c84e91bde48cb6ee0603b
Size

678KB
Sample

220724-rta5csffhk
MD5

2aee32c7d122a76eb0aeb622c0fd63a1
SHA1

85fe028305d01afff1885cf977121b3dd7b7207f
SHA256

835fce14e9e8a1024d0a220442bb7d48a0db8730317c84e91bde48cb6ee0603b
SHA512

e12fd3e866c823a995d0736a64a7063a2eee9e9d7cafd9fc5559165d952b098c944c48413d8a28a87d22fdab71490c90697752cdadaa5f7cdb78747ee18f12dc

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  835fce14e9e8a1024d0a220442bb7d48a0db8730317c84e91bde48cb6ee0603b
- Size
  
  678KB
- MD5
  
  2aee32c7d122a76eb0aeb622c0fd63a1
- SHA1
  
  85fe028305d01afff1885cf977121b3dd7b7207f
- SHA256
  
  835fce14e9e8a1024d0a220442bb7d48a0db8730317c84e91bde48cb6ee0603b
- SHA512
  
  e12fd3e866c823a995d0736a64a7063a2eee9e9d7cafd9fc5559165d952b098c944c48413d8a28a87d22fdab71490c90697752cdadaa5f7cdb78747ee18f12dc
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops desktop.ini file(s)
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan