da5fbf903c541a1126a81a48babfac264d7da6855d0fa408351793e7cf55cdd1 | Triage

Sharing

General

Target

da5fbf903c541a1126a81a48babfac264d7da6855d0fa408351793e7cf55cdd1
Size

394KB
Sample

221020-jwhcfsceen
MD5

81840c5cf17ba8e7a83f8c435bbc8770
SHA1

f32c39fd218cd12404945912600c5b066964a724
SHA256

da5fbf903c541a1126a81a48babfac264d7da6855d0fa408351793e7cf55cdd1
SHA512

9c9c43a281919c49e7ab82ab5b052c7d287459ceb26f5c597692105477c9dec18fe75f284377ebc83b7c1bc133d238c3735c2d5277c84ae74fe423bca8d0b215
SSDEEP

12288:2Nd9ZGh1fVqQt89e9fCzjPeJ/m9WY03xo0:QzZGPfsQRkzjUCl0xo

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  da5fbf903c541a1126a81a48babfac264d7da6855d0fa408351793e7cf55cdd1
- Size
  
  394KB
- MD5
  
  81840c5cf17ba8e7a83f8c435bbc8770
- SHA1
  
  f32c39fd218cd12404945912600c5b066964a724
- SHA256
  
  da5fbf903c541a1126a81a48babfac264d7da6855d0fa408351793e7cf55cdd1
- SHA512
  
  9c9c43a281919c49e7ab82ab5b052c7d287459ceb26f5c597692105477c9dec18fe75f284377ebc83b7c1bc133d238c3735c2d5277c84ae74fe423bca8d0b215
- SSDEEP
  
  12288:2Nd9ZGh1fVqQt89e9fCzjPeJ/m9WY03xo0:QzZGPfsQRkzjUCl0xo
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2