cf83c532630832887a5d0ee2f7701ae9157f318af685c6e816b2576384d97b42 | Triage

Sharing

General

Target

cf83c532630832887a5d0ee2f7701ae9157f318af685c6e816b2576384d97b42
Size

37KB
Sample

221127-mb16lsde5v
MD5

0c3d68a6953b0b8d495e66ce38e746a0
SHA1

c69a3566a45370c4dff668e50cb37c71882663dd
SHA256

cf83c532630832887a5d0ee2f7701ae9157f318af685c6e816b2576384d97b42
SHA512

c004ce20b848fa5d215d634c204bd9537833cf2855662b0c905f2c9eff6e19398777459ae7feb80bbb9da2b1c65300cf0c8d588f22d65f72648e43320cf252a0
SSDEEP

768:z2A3l1G/Z/EFQNkX3mLd4mwPEhNzg3IhZ6vdgXiH9zKYcXgYyGqdXw:z2AV1GBsmNkMOPEjhhoHzcXundX

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  cf83c532630832887a5d0ee2f7701ae9157f318af685c6e816b2576384d97b42
- Size
  
  37KB
- MD5
  
  0c3d68a6953b0b8d495e66ce38e746a0
- SHA1
  
  c69a3566a45370c4dff668e50cb37c71882663dd
- SHA256
  
  cf83c532630832887a5d0ee2f7701ae9157f318af685c6e816b2576384d97b42
- SHA512
  
  c004ce20b848fa5d215d634c204bd9537833cf2855662b0c905f2c9eff6e19398777459ae7feb80bbb9da2b1c65300cf0c8d588f22d65f72648e43320cf252a0
- SSDEEP
  
  768:z2A3l1G/Z/EFQNkX3mLd4mwPEhNzg3IhZ6vdgXiH9zKYcXgYyGqdXw:z2AV1GBsmNkMOPEjhhoHzcXundX
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Modifies AppInit DLL entries
  persistence
- Deletes itself
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan