63fb4a422c9fbcd312706a7f1dfe3ba2bc538a9a2d7757cdc95f8780289ce2f5 | Triage

Sharing

General

Target

63fb4a422c9fbcd312706a7f1dfe3ba2bc538a9a2d7757cdc95f8780289ce2f5
Size

4.4MB
Sample

221123-m8ry7sbc5z
MD5

2ab405c0e1a9dd350cbc1493f292e1e3
SHA1

dbda5a6cd08197da7611797f80a19965e8b58b2d
SHA256

63fb4a422c9fbcd312706a7f1dfe3ba2bc538a9a2d7757cdc95f8780289ce2f5
SHA512

e8305eb7e0614e14330d86371a637f984f92537f7fadef8a2a0d42749a03c7da7ec3e4c2b65330df2601bec23e9de9c71f38c99db3a1d068d98a7b8b143096e9
SSDEEP

98304:wmzbauQbhI5m0yR1qZiB5CFFxsyHL3hpPf7MZjkklsCJ:BatbhI5m0yiFyGLr37Gjk4J

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  63fb4a422c9fbcd312706a7f1dfe3ba2bc538a9a2d7757cdc95f8780289ce2f5
- Size
  
  4.4MB
- MD5
  
  2ab405c0e1a9dd350cbc1493f292e1e3
- SHA1
  
  dbda5a6cd08197da7611797f80a19965e8b58b2d
- SHA256
  
  63fb4a422c9fbcd312706a7f1dfe3ba2bc538a9a2d7757cdc95f8780289ce2f5
- SHA512
  
  e8305eb7e0614e14330d86371a637f984f92537f7fadef8a2a0d42749a03c7da7ec3e4c2b65330df2601bec23e9de9c71f38c99db3a1d068d98a7b8b143096e9
- SSDEEP
  
  98304:wmzbauQbhI5m0yR1qZiB5CFFxsyHL3hpPf7MZjkklsCJ:BatbhI5m0yiFyGLr37Gjk4J
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2