1116438ef74f605f2ad9e5f59c0245a95146883c36fa9dbe2dce12de55d2f470 | Triage

Sharing

General

Target

1116438ef74f605f2ad9e5f59c0245a95146883c36fa9dbe2dce12de55d2f470
Size

182KB
Sample

221020-k7vycsfbf8
MD5

514c74979ffe05e5eb6781f270e843b0
SHA1

8a81d6eec8d807e98bf3fd7147d94926b8c1f51d
SHA256

1116438ef74f605f2ad9e5f59c0245a95146883c36fa9dbe2dce12de55d2f470
SHA512

611571903211bc6719f33c83d38ca7ab8a2d5effb6945494b2a5dd4f3f3d458f07b0b9bd3e2790b30bde253ce89dcf02dae6c1ec021d40688c646285a64a60b1
SSDEEP

3072:o+0BjyZJ9s3ZDS3YhVHq/HnscyWG5WVtsCFBQKx3JiTbKg6P+RqlgwaDAO87niVg:FemlyUIhVKvnsCGAVy2x3ofKg6TlSGiK

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1116438ef74f605f2ad9e5f59c0245a95146883c36fa9dbe2dce12de55d2f470
- Size
  
  182KB
- MD5
  
  514c74979ffe05e5eb6781f270e843b0
- SHA1
  
  8a81d6eec8d807e98bf3fd7147d94926b8c1f51d
- SHA256
  
  1116438ef74f605f2ad9e5f59c0245a95146883c36fa9dbe2dce12de55d2f470
- SHA512
  
  611571903211bc6719f33c83d38ca7ab8a2d5effb6945494b2a5dd4f3f3d458f07b0b9bd3e2790b30bde253ce89dcf02dae6c1ec021d40688c646285a64a60b1
- SSDEEP
  
  3072:o+0BjyZJ9s3ZDS3YhVHq/HnscyWG5WVtsCFBQKx3JiTbKg6P+RqlgwaDAO87niVg:FemlyUIhVKvnsCGAVy2x3ofKg6TlSGiK
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan