19b3e6378431a29837694c64ff8e57ac70cff94867494953aa52fe7bac8b70db | Triage

Sharing

General

Target

19b3e6378431a29837694c64ff8e57ac70cff94867494953aa52fe7bac8b70db
Size

412KB
Sample

220918-3smybafea9
MD5

2ea563729d9f551fb85b8a73df951011
SHA1

6524f5bf6db770ecd64d31195eab03a82a0beec6
SHA256

19b3e6378431a29837694c64ff8e57ac70cff94867494953aa52fe7bac8b70db
SHA512

6694244dfdc7214fa19f0bbafddb05103df624c775d4ac02d763d63c3708c310d04c7521838d287a97eaf663a8761c5ff4dbd0d3644fd1fee5e07c4f343d7752
SSDEEP

6144:rxON8B5UjAvfEnKWzqJv9ZKWZQi/RjwaQ04wtUgakeADSIROv94:rxQI5UjqZWzqJv9ZPZv/RE84SUgpvOK

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  19b3e6378431a29837694c64ff8e57ac70cff94867494953aa52fe7bac8b70db
- Size
  
  412KB
- MD5
  
  2ea563729d9f551fb85b8a73df951011
- SHA1
  
  6524f5bf6db770ecd64d31195eab03a82a0beec6
- SHA256
  
  19b3e6378431a29837694c64ff8e57ac70cff94867494953aa52fe7bac8b70db
- SHA512
  
  6694244dfdc7214fa19f0bbafddb05103df624c775d4ac02d763d63c3708c310d04c7521838d287a97eaf663a8761c5ff4dbd0d3644fd1fee5e07c4f343d7752
- SSDEEP
  
  6144:rxON8B5UjAvfEnKWzqJv9ZKWZQi/RjwaQ04wtUgakeADSIROv94:rxQI5UjqZWzqJv9ZPZv/RE84SUgpvOK
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2