b7dea98845b09c271b38b32fe347f3e780c81a49905b2faada9581ec9fc86aaf | Triage

Sharing

General

Target

b7dea98845b09c271b38b32fe347f3e780c81a49905b2faada9581ec9fc86aaf
Size

484KB
Sample

221020-ydmlsabhe4
MD5

a0469757e6d5a44b1a5a96d30f0be830
SHA1

d47196dc84848ec42428bba6ea199fbf75401db0
SHA256

b7dea98845b09c271b38b32fe347f3e780c81a49905b2faada9581ec9fc86aaf
SHA512

f86ed3a9a3af40f99404a774108936c0785886c3f5cd94da4dde5122b0858e67be767547b11b749d79ddac69e42ef0c35ff42277002f6a7b01ad5107bd99ab20
SSDEEP

12288:Ii0/1A2F8kLY4SRhESmV1dZYb0fzy660uP7I:Ix1bF312WFV1I0mT/Pc

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  b7dea98845b09c271b38b32fe347f3e780c81a49905b2faada9581ec9fc86aaf
- Size
  
  484KB
- MD5
  
  a0469757e6d5a44b1a5a96d30f0be830
- SHA1
  
  d47196dc84848ec42428bba6ea199fbf75401db0
- SHA256
  
  b7dea98845b09c271b38b32fe347f3e780c81a49905b2faada9581ec9fc86aaf
- SHA512
  
  f86ed3a9a3af40f99404a774108936c0785886c3f5cd94da4dde5122b0858e67be767547b11b749d79ddac69e42ef0c35ff42277002f6a7b01ad5107bd99ab20
- SSDEEP
  
  12288:Ii0/1A2F8kLY4SRhESmV1dZYb0fzy660uP7I:Ix1bF312WFV1I0mT/Pc
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan