95903cabbc99c6daf1c65bae7ed039295630ecb3c0796dc0f098af2d9e8898b4 | Triage

Sharing

General

Target

95903cabbc99c6daf1c65bae7ed039295630ecb3c0796dc0f098af2d9e8898b4
Size

572KB
Sample

221125-h9f6waed21
MD5

b810dc7c0a5c2ff52feb478babe44811
SHA1

866fd994a800bd1fd9cd2661c035844e8f41b39e
SHA256

95903cabbc99c6daf1c65bae7ed039295630ecb3c0796dc0f098af2d9e8898b4
SHA512

a3c41a757699ffd40e31c3123ef96abd78071d90213e12b5e522d6fb3dcb44d2d6d0a44a10cc36386fd3b5cc6c173d2050ed0cc2c3bdc36f7a94e4ed053d4288
SSDEEP

12288:1BLDVkeM9UxZMdblcPd7USXYaC8LHnu2w4V5LL:1BLDVkeGUxZElimcHS4VN

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  95903cabbc99c6daf1c65bae7ed039295630ecb3c0796dc0f098af2d9e8898b4
- Size
  
  572KB
- MD5
  
  b810dc7c0a5c2ff52feb478babe44811
- SHA1
  
  866fd994a800bd1fd9cd2661c035844e8f41b39e
- SHA256
  
  95903cabbc99c6daf1c65bae7ed039295630ecb3c0796dc0f098af2d9e8898b4
- SHA512
  
  a3c41a757699ffd40e31c3123ef96abd78071d90213e12b5e522d6fb3dcb44d2d6d0a44a10cc36386fd3b5cc6c173d2050ed0cc2c3bdc36f7a94e4ed053d4288
- SSDEEP
  
  12288:1BLDVkeM9UxZMdblcPd7USXYaC8LHnu2w4V5LL:1BLDVkeGUxZElimcHS4VN
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2