33b4fb6a820b758c4b2c5f0a28ab5e76607433432732c862c5a31e8c04f3cd65 | Triage

Sharing

General

Target

33b4fb6a820b758c4b2c5f0a28ab5e76607433432732c862c5a31e8c04f3cd65
Size

374KB
Sample

221106-k9bx9sddd4
MD5

312dce605ed72417860a8b05b878f1f1
SHA1

6ec385240ef21eda80f6d89c9c22d63e7fc38664
SHA256

33b4fb6a820b758c4b2c5f0a28ab5e76607433432732c862c5a31e8c04f3cd65
SHA512

6690ff90aeccdd69f39a18df2f17e26a315e17fb68cbc7711c8986af0f4c307aa0e86a742a8e9721a60b1a17133b60a5580aec5f4928be47355be372de3dc668
SSDEEP

6144:DKguZaiRjkOnGSVQsauLHwF2qhDgtLxqIRB4BXIREebEv7G/KYZLOP0:DWHGmauBqhqxqEaBXYzKI

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  33b4fb6a820b758c4b2c5f0a28ab5e76607433432732c862c5a31e8c04f3cd65
- Size
  
  374KB
- MD5
  
  312dce605ed72417860a8b05b878f1f1
- SHA1
  
  6ec385240ef21eda80f6d89c9c22d63e7fc38664
- SHA256
  
  33b4fb6a820b758c4b2c5f0a28ab5e76607433432732c862c5a31e8c04f3cd65
- SHA512
  
  6690ff90aeccdd69f39a18df2f17e26a315e17fb68cbc7711c8986af0f4c307aa0e86a742a8e9721a60b1a17133b60a5580aec5f4928be47355be372de3dc668
- SSDEEP
  
  6144:DKguZaiRjkOnGSVQsauLHwF2qhDgtLxqIRB4BXIREebEv7G/KYZLOP0:DWHGmauBqhqxqEaBXYzKI
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2