75d320811d82afe105f0c3d354241d0c6a75c1b1d2215de7f0e5e56eaed8bfa5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75d320811d82afe105f0c3d354241d0c6a75c1b1d2215de7f0e5e56eaed8bfa5
Size

404KB
Sample

221125-z6c4gsag2x
MD5

015f6e1c90fb3b4ad756499a3666c9e2
SHA1

e42c6288ab279290fc4172625d8125e5754cc6c1
SHA256

75d320811d82afe105f0c3d354241d0c6a75c1b1d2215de7f0e5e56eaed8bfa5
SHA512

93d3811014d6be426e3164831aba6cb106c3a792cb408e3c142a42f4a0e25bfa47ea7dd2dbf05f4b52bde843f56d9ef8700985bfadd63cffff9c4804303558d9
SSDEEP

6144:o5Q+C76lqBwp+VTRWTVVKxYcIArgzAOB00fTOgq2CsPMCYCHHeR:l+C3BkMTwTr0IAp40Q6sEZCH+R

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  75d320811d82afe105f0c3d354241d0c6a75c1b1d2215de7f0e5e56eaed8bfa5
- Size
  
  404KB
- MD5
  
  015f6e1c90fb3b4ad756499a3666c9e2
- SHA1
  
  e42c6288ab279290fc4172625d8125e5754cc6c1
- SHA256
  
  75d320811d82afe105f0c3d354241d0c6a75c1b1d2215de7f0e5e56eaed8bfa5
- SHA512
  
  93d3811014d6be426e3164831aba6cb106c3a792cb408e3c142a42f4a0e25bfa47ea7dd2dbf05f4b52bde843f56d9ef8700985bfadd63cffff9c4804303558d9
- SSDEEP
  
  6144:o5Q+C76lqBwp+VTRWTVVKxYcIArgzAOB00fTOgq2CsPMCYCHHeR:l+C3BkMTwTr0IAp40Q6sEZCH+R
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2