89b83ab2f589e211c2213ab1cae97ed2d7f85196e8a80f115abfb9f01925f5a5 | Triage

Sharing

General

Target

89b83ab2f589e211c2213ab1cae97ed2d7f85196e8a80f115abfb9f01925f5a5
Size

420KB
Sample

221029-qgvskagfh8
MD5

db357d98862dec634e2640614535143b
SHA1

c392f316842350fac53dc80e20a002b4d546d722
SHA256

89b83ab2f589e211c2213ab1cae97ed2d7f85196e8a80f115abfb9f01925f5a5
SHA512

71ba8e7e063683746fcf98c9f750db485fee4df7e619c7bd78053fe00844b4662fcb948b52643009636af84febaa46775f0ba272d2b1ac2b3bebffac5f065e73
SSDEEP

12288:/kFnULIk9M22pZ2lqsCJzmRKyxNwrFLWCKsgqvX:/k1UL79M2a2cJJiRrxAWSg

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  89b83ab2f589e211c2213ab1cae97ed2d7f85196e8a80f115abfb9f01925f5a5
- Size
  
  420KB
- MD5
  
  db357d98862dec634e2640614535143b
- SHA1
  
  c392f316842350fac53dc80e20a002b4d546d722
- SHA256
  
  89b83ab2f589e211c2213ab1cae97ed2d7f85196e8a80f115abfb9f01925f5a5
- SHA512
  
  71ba8e7e063683746fcf98c9f750db485fee4df7e619c7bd78053fe00844b4662fcb948b52643009636af84febaa46775f0ba272d2b1ac2b3bebffac5f065e73
- SSDEEP
  
  12288:/kFnULIk9M22pZ2lqsCJzmRKyxNwrFLWCKsgqvX:/k1UL79M2a2cJJiRrxAWSg
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2