2d9f7617e031083bdfeff47b4951e85c5d125531a1cc866eadbfa5ebbd6f72bd | Triage

Sharing

General

Target

2d9f7617e031083bdfeff47b4951e85c5d125531a1cc866eadbfa5ebbd6f72bd
Size

404KB
Sample

221123-ly3saaga5y
MD5

0196b2748eeb3f6425abd0fb2146d770
SHA1

2fe41c4371e59503d11dbd56ca026a86fb0e3002
SHA256

2d9f7617e031083bdfeff47b4951e85c5d125531a1cc866eadbfa5ebbd6f72bd
SHA512

b38255e2aa2ef2e88d6cfb87990ca513d6a4bac5bd833a3ec7e111710439b9e029fa3695bb8ca9f01a13602ca635716e89cbe7a6623471de06c46e83555d283d
SSDEEP

6144:3M6L186Q37NIRcC1YX+1q4V+l48WTe0KFeEXDta+Nvk7XZRJSvWszp:tL187IR/1ImJeBFPTvk7JRSWsF

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  2d9f7617e031083bdfeff47b4951e85c5d125531a1cc866eadbfa5ebbd6f72bd
- Size
  
  404KB
- MD5
  
  0196b2748eeb3f6425abd0fb2146d770
- SHA1
  
  2fe41c4371e59503d11dbd56ca026a86fb0e3002
- SHA256
  
  2d9f7617e031083bdfeff47b4951e85c5d125531a1cc866eadbfa5ebbd6f72bd
- SHA512
  
  b38255e2aa2ef2e88d6cfb87990ca513d6a4bac5bd833a3ec7e111710439b9e029fa3695bb8ca9f01a13602ca635716e89cbe7a6623471de06c46e83555d283d
- SSDEEP
  
  6144:3M6L186Q37NIRcC1YX+1q4V+l48WTe0KFeEXDta+Nvk7XZRJSvWszp:tL187IR/1ImJeBFPTvk7JRSWsF
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2