116da4358543fb75e6ca4efaee18a9b18af2bd0496528e2805c318694d79d62f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.awue-116da4358543fb75e6ca4efaee18a9b18af2bd0496528e2805c318694d79d62f
Size

124KB
Sample

221106-rtknsshedj
MD5

38dd72b242538462324d3bc18e0b4778
SHA1

7e8c8bd919ee479606c36882d48c4a74d19614c4
SHA256

116da4358543fb75e6ca4efaee18a9b18af2bd0496528e2805c318694d79d62f
SHA512

1bce406d15ddbe9fed53af456ea0e21755f0ddea825d0a5c5c0c108ab8b00de74eaab39cacb7eb4bea5b2393b4ff9d8a5503cb1efd9a9eafe10c3f3af8df1afe
SSDEEP

3072:s+ELu8G993lZ78isw15Cp0hR7ShUeNXxhbO3:s+jVj8isw1op0hR7ShUr

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  Trojan-Ransom.Win32.Blocker.awue-116da4358543fb75e6ca4efaee18a9b18af2bd0496528e2805c318694d79d62f
- Size
  
  124KB
- MD5
  
  38dd72b242538462324d3bc18e0b4778
- SHA1
  
  7e8c8bd919ee479606c36882d48c4a74d19614c4
- SHA256
  
  116da4358543fb75e6ca4efaee18a9b18af2bd0496528e2805c318694d79d62f
- SHA512
  
  1bce406d15ddbe9fed53af456ea0e21755f0ddea825d0a5c5c0c108ab8b00de74eaab39cacb7eb4bea5b2393b4ff9d8a5503cb1efd9a9eafe10c3f3af8df1afe
- SSDEEP
  
  3072:s+ELu8G993lZ78isw15Cp0hR7ShUeNXxhbO3:s+jVj8isw1op0hR7ShUr
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2