b40eb20d387209c46cf1152b72f8a3c0e92bd231a246f06226c885de8c049618 | Triage

Sharing

General

Target

b40eb20d387209c46cf1152b72f8a3c0e92bd231a246f06226c885de8c049618
Size

432KB
Sample

221123-na8dzagc67
MD5

27c0d3ea8dc99b5bd348bdaad9d92cb3
SHA1

7ff413755031de980cf2b987120c42e127b78962
SHA256

b40eb20d387209c46cf1152b72f8a3c0e92bd231a246f06226c885de8c049618
SHA512

9ca2e6a7f04438f3f536e0c3ff3a90523b93b06ff2503f4725ffb7ae50d289d7e4445b8f957fd421a9c04b57f73437dfe4f0be2b9a200df90fc535537d2998e0
SSDEEP

12288:2yiud+elcJ5t4rIGSFM6Rv39O0Hj0kr4754y1Bo:2y2Qa0rIGl0HYbBc

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  b40eb20d387209c46cf1152b72f8a3c0e92bd231a246f06226c885de8c049618
- Size
  
  432KB
- MD5
  
  27c0d3ea8dc99b5bd348bdaad9d92cb3
- SHA1
  
  7ff413755031de980cf2b987120c42e127b78962
- SHA256
  
  b40eb20d387209c46cf1152b72f8a3c0e92bd231a246f06226c885de8c049618
- SHA512
  
  9ca2e6a7f04438f3f536e0c3ff3a90523b93b06ff2503f4725ffb7ae50d289d7e4445b8f957fd421a9c04b57f73437dfe4f0be2b9a200df90fc535537d2998e0
- SSDEEP
  
  12288:2yiud+elcJ5t4rIGSFM6Rv39O0Hj0kr4754y1Bo:2y2Qa0rIGl0HYbBc
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2