91187aadf4056777bfdfb499b8e3b5ef3b35c6d5579e5a17220115ef1b15fc2c | Triage

Sharing

General

Target

91187aadf4056777bfdfb499b8e3b5ef3b35c6d5579e5a17220115ef1b15fc2c
Size

140KB
Sample

221029-f9t2madehq
MD5

7f99ef612eef45f1595a2672ef7ab6a0
SHA1

8c2523517d94bc7262334727da1cc2d5340d9b7c
SHA256

91187aadf4056777bfdfb499b8e3b5ef3b35c6d5579e5a17220115ef1b15fc2c
SHA512

f3bd7c355d4d828f17ef53003d412929ddc917321e4d0cd34b5ffeb03d7a031364927439c89bace48fc0c8f47c48f646bab5fee05af0f5e5378549f2c3e64ee8
SSDEEP

3072:UPLNQiwQe7V6RHbNFwxHDya9CdrSOOYB3:USiYYRHMvWO0

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  91187aadf4056777bfdfb499b8e3b5ef3b35c6d5579e5a17220115ef1b15fc2c
- Size
  
  140KB
- MD5
  
  7f99ef612eef45f1595a2672ef7ab6a0
- SHA1
  
  8c2523517d94bc7262334727da1cc2d5340d9b7c
- SHA256
  
  91187aadf4056777bfdfb499b8e3b5ef3b35c6d5579e5a17220115ef1b15fc2c
- SHA512
  
  f3bd7c355d4d828f17ef53003d412929ddc917321e4d0cd34b5ffeb03d7a031364927439c89bace48fc0c8f47c48f646bab5fee05af0f5e5378549f2c3e64ee8
- SSDEEP
  
  3072:UPLNQiwQe7V6RHbNFwxHDya9CdrSOOYB3:USiYYRHMvWO0
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2