9a12eb1877309afc123bcb4267fb29f4d57ec7c4acea9e2867646c9d28cc043d | Triage

Sharing

General

Target

9a12eb1877309afc123bcb4267fb29f4d57ec7c4acea9e2867646c9d28cc043d
Size

410KB
Sample

221123-qvnw6seh75
MD5

90cea57929c3e9f3ee8b5ee7fcdf8db7
SHA1

076ff6521f81ce7635c25244d6124ec9a9825ff4
SHA256

9a12eb1877309afc123bcb4267fb29f4d57ec7c4acea9e2867646c9d28cc043d
SHA512

d2bf43760afd6a122d376e97b7769fbbd07c1259fdbd2e8c3e1c1c1e4a3b13b1b02351405a285c312d0d17f2d85615af60aa4363ef724c827bf4ff2a78ed4517
SSDEEP

6144:QYcvJQG2E1hn+v41ltZJaToYJ2hUH+0wQKU5BjXz6fQBsl3TLVs//0LvO:QYcGGPkw1P7jhU8QKU5NzrslWsL

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  9a12eb1877309afc123bcb4267fb29f4d57ec7c4acea9e2867646c9d28cc043d
- Size
  
  410KB
- MD5
  
  90cea57929c3e9f3ee8b5ee7fcdf8db7
- SHA1
  
  076ff6521f81ce7635c25244d6124ec9a9825ff4
- SHA256
  
  9a12eb1877309afc123bcb4267fb29f4d57ec7c4acea9e2867646c9d28cc043d
- SHA512
  
  d2bf43760afd6a122d376e97b7769fbbd07c1259fdbd2e8c3e1c1c1e4a3b13b1b02351405a285c312d0d17f2d85615af60aa4363ef724c827bf4ff2a78ed4517
- SSDEEP
  
  6144:QYcvJQG2E1hn+v41ltZJaToYJ2hUH+0wQKU5BjXz6fQBsl3TLVs//0LvO:QYcGGPkw1P7jhU8QKU5NzrslWsL
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2