26d3b4c1d7e528d952f26d50b49c8836801ca3da83d4d7a61b9d5b179ef32857 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d3b4c1d7e528d952f26d50b49c8836801ca3da83d4d7a61b9d5b179ef32857
Size

372KB
Sample

221107-q97mtsaeg9
MD5

94d86c0be5cd0585ffdec1e8a320fe17
SHA1

b9a0b81b0e38b2a3444bcb655b6c00e4c3defcbb
SHA256

26d3b4c1d7e528d952f26d50b49c8836801ca3da83d4d7a61b9d5b179ef32857
SHA512

00eaba9df6999282c7cb2b300ba181510b8d26d7e8161f7e5d19ef11a60bc7d0adb3548706eb272c95b2d2d6e2691833bbc307e16fc0c1924f703146cd553137
SSDEEP

6144:uNwTRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:rneF8m4ewS/HcF+ih7wp10l1h+TxqM

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  26d3b4c1d7e528d952f26d50b49c8836801ca3da83d4d7a61b9d5b179ef32857
- Size
  
  372KB
- MD5
  
  94d86c0be5cd0585ffdec1e8a320fe17
- SHA1
  
  b9a0b81b0e38b2a3444bcb655b6c00e4c3defcbb
- SHA256
  
  26d3b4c1d7e528d952f26d50b49c8836801ca3da83d4d7a61b9d5b179ef32857
- SHA512
  
  00eaba9df6999282c7cb2b300ba181510b8d26d7e8161f7e5d19ef11a60bc7d0adb3548706eb272c95b2d2d6e2691833bbc307e16fc0c1924f703146cd553137
- SSDEEP
  
  6144:uNwTRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:rneF8m4ewS/HcF+ih7wp10l1h+TxqM
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2