e808b037fea4d3d2566e282a7f37f10d50f533544d7d014b4eebb9a1f33e93ba | Triage

Sharing

General

Target

e808b037fea4d3d2566e282a7f37f10d50f533544d7d014b4eebb9a1f33e93ba
Size

390KB
Sample

221123-lyyhkaga4z
MD5

f078bff69dba5f232cb69639fa54589f
SHA1

242f59ed0e3db640bf255ce9d6ead27b4dd396c5
SHA256

e808b037fea4d3d2566e282a7f37f10d50f533544d7d014b4eebb9a1f33e93ba
SHA512

38a6ed696f147d8d84ed7b3fd08cb87ef7fd303aeb37741fa7faabb438154d2b0a5a7dc899114bc3156192ee5c99dd280c4299e6261181b75137e1e10e8d2049
SSDEEP

6144:OBnqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPr:AO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  e808b037fea4d3d2566e282a7f37f10d50f533544d7d014b4eebb9a1f33e93ba
- Size
  
  390KB
- MD5
  
  f078bff69dba5f232cb69639fa54589f
- SHA1
  
  242f59ed0e3db640bf255ce9d6ead27b4dd396c5
- SHA256
  
  e808b037fea4d3d2566e282a7f37f10d50f533544d7d014b4eebb9a1f33e93ba
- SHA512
  
  38a6ed696f147d8d84ed7b3fd08cb87ef7fd303aeb37741fa7faabb438154d2b0a5a7dc899114bc3156192ee5c99dd280c4299e6261181b75137e1e10e8d2049
- SSDEEP
  
  6144:OBnqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPr:AO1xm+QoK0t4K3gCTDYWGrYzt+NST
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2