b231bd36cc78417018e6ebf709c53f01eeb20ef74eceba68f5c2ddf3526a927a | Triage

Sharing

General

Target

b231bd36cc78417018e6ebf709c53f01eeb20ef74eceba68f5c2ddf3526a927a
Size

492KB
Sample

221123-na81hagc69
MD5

0317fb80ade1b0dd260bd6a73990e6d0
SHA1

03b5970162ebc905d4ec74174b8e94f0e122b27b
SHA256

b231bd36cc78417018e6ebf709c53f01eeb20ef74eceba68f5c2ddf3526a927a
SHA512

1b6ebf7ca0c4775895508f52df738d7fcef117ebe8acd024e1be194ed0912d18f566b4ef0702960278358f96ff5871106b9d216b18493d7c408a957b15a635f8
SSDEEP

6144:gNc0pJrmmnaVvlw5RDqkFEoS782Ag30sJFbGozUc5t+Ee8:Leahlw5R+kZ2AY0sLp5t+

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  b231bd36cc78417018e6ebf709c53f01eeb20ef74eceba68f5c2ddf3526a927a
- Size
  
  492KB
- MD5
  
  0317fb80ade1b0dd260bd6a73990e6d0
- SHA1
  
  03b5970162ebc905d4ec74174b8e94f0e122b27b
- SHA256
  
  b231bd36cc78417018e6ebf709c53f01eeb20ef74eceba68f5c2ddf3526a927a
- SHA512
  
  1b6ebf7ca0c4775895508f52df738d7fcef117ebe8acd024e1be194ed0912d18f566b4ef0702960278358f96ff5871106b9d216b18493d7c408a957b15a635f8
- SSDEEP
  
  6144:gNc0pJrmmnaVvlw5RDqkFEoS782Ag30sJFbGozUc5t+Ee8:Leahlw5R+kZ2AY0sLp5t+
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2