583ce539e394143b538340b1d44aa6c4b63ca93dcab63a00488a6c47d145872a | Triage

Sharing

General

Target

583ce539e394143b538340b1d44aa6c4b63ca93dcab63a00488a6c47d145872a
Size

448KB
Sample

221123-ly19fsga5t
MD5

006c199a9deeace2f18ef617a78f4f83
SHA1

48bf21489df3da5e6f292321211a0c2974632dd5
SHA256

583ce539e394143b538340b1d44aa6c4b63ca93dcab63a00488a6c47d145872a
SHA512

5b9a07770a4437b358e0660e5704d78fa64a873c82b0a314c9c78c3855480255cad1c05ff107ce8d3b28be5ef23de8cba6bcb278dcd3b7bb4139f164d359e917
SSDEEP

12288:/7haEajEITQgrq0t2D19qTcVPdt8XiCch:DhaEQEXz51QcVPYS

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  583ce539e394143b538340b1d44aa6c4b63ca93dcab63a00488a6c47d145872a
- Size
  
  448KB
- MD5
  
  006c199a9deeace2f18ef617a78f4f83
- SHA1
  
  48bf21489df3da5e6f292321211a0c2974632dd5
- SHA256
  
  583ce539e394143b538340b1d44aa6c4b63ca93dcab63a00488a6c47d145872a
- SHA512
  
  5b9a07770a4437b358e0660e5704d78fa64a873c82b0a314c9c78c3855480255cad1c05ff107ce8d3b28be5ef23de8cba6bcb278dcd3b7bb4139f164d359e917
- SSDEEP
  
  12288:/7haEajEITQgrq0t2D19qTcVPdt8XiCch:DhaEQEXz51QcVPYS
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2