ebd7878fe3031e555364a7ae99d883d1a8ff7b0ef59b4b269728cd22ac352fed | Triage

Sharing

General

Target

ebd7878fe3031e555364a7ae99d883d1a8ff7b0ef59b4b269728cd22ac352fed
Size

477KB
Sample

221029-gtxcgsedcm
MD5

70f3d4f2d984905227d544f84a5a73c0
SHA1

eb4b372fffdca502f1bb394733d3f9df4d680ee3
SHA256

ebd7878fe3031e555364a7ae99d883d1a8ff7b0ef59b4b269728cd22ac352fed
SHA512

455cbaa2ab500440121f32554bc28020ff22c3139e1d361d8915e5f116ddc34ad6b01a1cccd6cf93760d190eb33f56cb31db53217c49c4da0c8c5b60ddd88b06
SSDEEP

6144:lzwVIjdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGeyJ:lwseOkodHq9d+1U0rWSB7oCqB5J0

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  ebd7878fe3031e555364a7ae99d883d1a8ff7b0ef59b4b269728cd22ac352fed
- Size
  
  477KB
- MD5
  
  70f3d4f2d984905227d544f84a5a73c0
- SHA1
  
  eb4b372fffdca502f1bb394733d3f9df4d680ee3
- SHA256
  
  ebd7878fe3031e555364a7ae99d883d1a8ff7b0ef59b4b269728cd22ac352fed
- SHA512
  
  455cbaa2ab500440121f32554bc28020ff22c3139e1d361d8915e5f116ddc34ad6b01a1cccd6cf93760d190eb33f56cb31db53217c49c4da0c8c5b60ddd88b06
- SSDEEP
  
  6144:lzwVIjdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGeyJ:lwseOkodHq9d+1U0rWSB7oCqB5J0
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2