5a964c118d7337e914198ddd8316a5c378309259162cbf8ef4aa62be13748fc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a964c118d7337e914198ddd8316a5c378309259162cbf8ef4aa62be13748fc7
Size

384KB
Sample

221106-etqtlacae4
MD5

20c1ccccf2329246fa9162f595586625
SHA1

e8ecf52c2e28339b8924f4c2ff919e1c44a94f58
SHA256

5a964c118d7337e914198ddd8316a5c378309259162cbf8ef4aa62be13748fc7
SHA512

8de80b91f7aa06c79afd4efe401914b82317228c9ce2f4dbde8acc4f70302b508b2ee3acd5232d000b7b5a0305f00817d04f1fe56c84a658651418ace8f7d576
SSDEEP

6144:dlRLE9M1SXPXyisAkWTWAN3OzZVvhnICc0vxZk+akHIyZO981BPZdpbV:dzE9M1SXPXy0/pOXhnDH5HIyo981BHJV

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5a964c118d7337e914198ddd8316a5c378309259162cbf8ef4aa62be13748fc7
- Size
  
  384KB
- MD5
  
  20c1ccccf2329246fa9162f595586625
- SHA1
  
  e8ecf52c2e28339b8924f4c2ff919e1c44a94f58
- SHA256
  
  5a964c118d7337e914198ddd8316a5c378309259162cbf8ef4aa62be13748fc7
- SHA512
  
  8de80b91f7aa06c79afd4efe401914b82317228c9ce2f4dbde8acc4f70302b508b2ee3acd5232d000b7b5a0305f00817d04f1fe56c84a658651418ace8f7d576
- SSDEEP
  
  6144:dlRLE9M1SXPXyisAkWTWAN3OzZVvhnICc0vxZk+akHIyZO981BPZdpbV:dzE9M1SXPXy0/pOXhnDH5HIyo981BHJV
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2