04f59c381cbb547fc48937711dd266eab44536990bcc3099d471f43d1eb1496b | Triage

Sharing

General

Target

04f59c381cbb547fc48937711dd266eab44536990bcc3099d471f43d1eb1496b
Size

380KB
Sample

220919-ab5sksgab5
MD5

2af37e880eade257929567b95ecf53e0
SHA1

5d357f2aee3db018f5d3d764029d61cc66471634
SHA256

04f59c381cbb547fc48937711dd266eab44536990bcc3099d471f43d1eb1496b
SHA512

e45c74d510b4410052ec89d7ecfee5d2b9785658960bd2c1041ee1049f8179052153b1acdeb6c0d53f202f0232fbe3f1f9d995a5002def49d124b82068977581
SSDEEP

6144:1i8RMpCQ0TexdCoNSQwMOu/L5NY5k7paog+4gyA1H1zZsQ6psGeDkXMg:M8RMpCQ2exdCGGMOu/iQtUA1A7R

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  04f59c381cbb547fc48937711dd266eab44536990bcc3099d471f43d1eb1496b
- Size
  
  380KB
- MD5
  
  2af37e880eade257929567b95ecf53e0
- SHA1
  
  5d357f2aee3db018f5d3d764029d61cc66471634
- SHA256
  
  04f59c381cbb547fc48937711dd266eab44536990bcc3099d471f43d1eb1496b
- SHA512
  
  e45c74d510b4410052ec89d7ecfee5d2b9785658960bd2c1041ee1049f8179052153b1acdeb6c0d53f202f0232fbe3f1f9d995a5002def49d124b82068977581
- SSDEEP
  
  6144:1i8RMpCQ0TexdCoNSQwMOu/L5NY5k7paog+4gyA1H1zZsQ6psGeDkXMg:M8RMpCQ2exdCGGMOu/iQtUA1A7R
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2