315b90d33927a1077f5dc147d2ea9fc766974412efd3267aba79c8c48ad88faa | Triage

Sharing

General

Target

315b90d33927a1077f5dc147d2ea9fc766974412efd3267aba79c8c48ad88faa
Size

444KB
Sample

221123-r1hssaaa29
MD5

7e28e7a1d610a5e8e70d10db80d85e81
SHA1

bbbef71566551a343710e18287cdb56cc4d3436f
SHA256

315b90d33927a1077f5dc147d2ea9fc766974412efd3267aba79c8c48ad88faa
SHA512

af01ecc3e128b1a2a27e2c683f5a81aa63f1f05a67a58b5459b32e4c5359714361b53ee9c059cd7ad479d6468a559f75f0cf6b8b35d0108f6989adbdef908106
SSDEEP

12288:Mq2c6/b2j7Pzu1nlPUfngo1vbSAuaTFA7E2W:rE/yj7LCl2uaJ0E2

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  315b90d33927a1077f5dc147d2ea9fc766974412efd3267aba79c8c48ad88faa
- Size
  
  444KB
- MD5
  
  7e28e7a1d610a5e8e70d10db80d85e81
- SHA1
  
  bbbef71566551a343710e18287cdb56cc4d3436f
- SHA256
  
  315b90d33927a1077f5dc147d2ea9fc766974412efd3267aba79c8c48ad88faa
- SHA512
  
  af01ecc3e128b1a2a27e2c683f5a81aa63f1f05a67a58b5459b32e4c5359714361b53ee9c059cd7ad479d6468a559f75f0cf6b8b35d0108f6989adbdef908106
- SSDEEP
  
  12288:Mq2c6/b2j7Pzu1nlPUfngo1vbSAuaTFA7E2W:rE/yj7LCl2uaJ0E2
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2