4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47 | Triage

Sharing

General

Target

4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47
Size

384KB
Sample

221123-lyfbzscf33
MD5

a3ac7ff363b43b671a8818d918268e55
SHA1

59de6d8942e224cd96f609740c211a50b82df7bb
SHA256

4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47
SHA512

e7a0c13c6b286bb30ad6094205f4388aa09891f3fa6b6b3250468a843a76ab8418788b46920d5aa026cfa6b21caa470415f7b1d1667d6d87a3dba93d72d046d1
SSDEEP

6144:6EH1C+Rixp8IlKlLwAqGKbb4E6hsQGqnT831vb7nWRuMcgHqS8OEiRm:6EgJD8IbSTIvbDWRuMPKiBo

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47
- Size
  
  384KB
- MD5
  
  a3ac7ff363b43b671a8818d918268e55
- SHA1
  
  59de6d8942e224cd96f609740c211a50b82df7bb
- SHA256
  
  4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47
- SHA512
  
  e7a0c13c6b286bb30ad6094205f4388aa09891f3fa6b6b3250468a843a76ab8418788b46920d5aa026cfa6b21caa470415f7b1d1667d6d87a3dba93d72d046d1
- SSDEEP
  
  6144:6EH1C+Rixp8IlKlLwAqGKbb4E6hsQGqnT831vb7nWRuMcgHqS8OEiRm:6EgJD8IbSTIvbDWRuMPKiBo
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2