9bc22bc56a000665c340e083e509c188f7ffbc76051f381958e94e9e650c6ecc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bc22bc56a000665c340e083e509c188f7ffbc76051f381958e94e9e650c6ecc
Size

400KB
Sample

220918-3n5ybsfcd6
MD5

6b9ab320b769be1cb1bc1976815cbbd6
SHA1

59a88c95f37cfc7186552eae01233d1c4fd45775
SHA256

9bc22bc56a000665c340e083e509c188f7ffbc76051f381958e94e9e650c6ecc
SHA512

92c4dc58372195760c76f04311f9aa59c9a2242e5c7a9119bfcde1b2ea4c05e6ce17af8b7b1d31b114e5a6d54730ed7e6b9a09acfca4b502618399b89f6b93b8
SSDEEP

6144:tRz6oUAdH8tm9O1ULia637SEpdJHRbqTLZUwAafaNdrA/h4ZR:BBSyiaM/JHROTLiCmq2Z

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  9bc22bc56a000665c340e083e509c188f7ffbc76051f381958e94e9e650c6ecc
- Size
  
  400KB
- MD5
  
  6b9ab320b769be1cb1bc1976815cbbd6
- SHA1
  
  59a88c95f37cfc7186552eae01233d1c4fd45775
- SHA256
  
  9bc22bc56a000665c340e083e509c188f7ffbc76051f381958e94e9e650c6ecc
- SHA512
  
  92c4dc58372195760c76f04311f9aa59c9a2242e5c7a9119bfcde1b2ea4c05e6ce17af8b7b1d31b114e5a6d54730ed7e6b9a09acfca4b502618399b89f6b93b8
- SSDEEP
  
  6144:tRz6oUAdH8tm9O1ULia637SEpdJHRbqTLZUwAafaNdrA/h4ZR:BBSyiaM/JHROTLiCmq2Z
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2