31c17d4b7fbfcf5a65d95668650986d14f21db14118efba09464c968601bb3c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31c17d4b7fbfcf5a65d95668650986d14f21db14118efba09464c968601bb3c0
Size

344KB
Sample

221021-faykrscdg5
MD5

48f9e4cb82eac70f509c1c357fc87b90
SHA1

3fb4289b186e5a490afa4e4dc0ba379b2c07895e
SHA256

31c17d4b7fbfcf5a65d95668650986d14f21db14118efba09464c968601bb3c0
SHA512

e48d327d6a1e847fd5b49082a889aef3148b58e89687323f9b205cd254dc27ad4aa25ae9d861b18feb3dd456036a8b49f9f5eb33cdf5e23235679aa6cb08b2fe
SSDEEP

6144:5GzmuWyUufA1BXT/Jmt1WvhdKgvmH0v8LwTjJZscy0/p20UVwMcitXZOERt4vOy:gNUuYz/JDUgvmm8Sscy0sVw/GZOEIvO

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  31c17d4b7fbfcf5a65d95668650986d14f21db14118efba09464c968601bb3c0
- Size
  
  344KB
- MD5
  
  48f9e4cb82eac70f509c1c357fc87b90
- SHA1
  
  3fb4289b186e5a490afa4e4dc0ba379b2c07895e
- SHA256
  
  31c17d4b7fbfcf5a65d95668650986d14f21db14118efba09464c968601bb3c0
- SHA512
  
  e48d327d6a1e847fd5b49082a889aef3148b58e89687323f9b205cd254dc27ad4aa25ae9d861b18feb3dd456036a8b49f9f5eb33cdf5e23235679aa6cb08b2fe
- SSDEEP
  
  6144:5GzmuWyUufA1BXT/Jmt1WvhdKgvmH0v8LwTjJZscy0/p20UVwMcitXZOERt4vOy:gNUuYz/JDUgvmm8Sscy0sVw/GZOEIvO
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2