52a670958cae9bc6ed96e8117f883cd74a375f7ad9d8f8e05f8f95cdd0bc179c | Triage

Sharing

General

Target

52a670958cae9bc6ed96e8117f883cd74a375f7ad9d8f8e05f8f95cdd0bc179c
Size

469KB
Sample

221030-snfnbsggaq
MD5

83558519e21db1ccde91e35eac42cf94
SHA1

7d43bd2f82062474af2337caf8263e711901ec17
SHA256

52a670958cae9bc6ed96e8117f883cd74a375f7ad9d8f8e05f8f95cdd0bc179c
SHA512

cb00fb6d97cc4b0a0953e9ac4445b46246dba9b34ab1876708d007a33e807663b07e76d8aafe30f6e50fe809bb8446e05d5bc24a6b86d6a52fa25aa38ffd7bfc
SSDEEP

6144:ln8UaqRarmDMra6LNpmvn9rQxMrnVUexfefL7gwwwUFeoB/wW2CC5Xse0l9KeVG:l9acaZzL09XVUCgLAT72we0lwe0

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  52a670958cae9bc6ed96e8117f883cd74a375f7ad9d8f8e05f8f95cdd0bc179c
- Size
  
  469KB
- MD5
  
  83558519e21db1ccde91e35eac42cf94
- SHA1
  
  7d43bd2f82062474af2337caf8263e711901ec17
- SHA256
  
  52a670958cae9bc6ed96e8117f883cd74a375f7ad9d8f8e05f8f95cdd0bc179c
- SHA512
  
  cb00fb6d97cc4b0a0953e9ac4445b46246dba9b34ab1876708d007a33e807663b07e76d8aafe30f6e50fe809bb8446e05d5bc24a6b86d6a52fa25aa38ffd7bfc
- SSDEEP
  
  6144:ln8UaqRarmDMra6LNpmvn9rQxMrnVUexfefL7gwwwUFeoB/wW2CC5Xse0l9KeVG:l9acaZzL09XVUCgLAT72we0lwe0
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2