beb262e942d7acaea015e161b87d85e6260d8aca972c6bbd18aea6afa70631a9 | Triage

Sharing

General

Target

beb262e942d7acaea015e161b87d85e6260d8aca972c6bbd18aea6afa70631a9
Size

370KB
Sample

221127-tl9dasaf66
MD5

8850eec0bd0c178b46864038615dabb0
SHA1

00cb79fcd28360f566b87289d55802cdb616470f
SHA256

beb262e942d7acaea015e161b87d85e6260d8aca972c6bbd18aea6afa70631a9
SHA512

9e70587c809feabfb2ed89cee43f7faaaf8b546f7cd1ae55ffcc86ea58fce44cc436adcbeee99074a4f1485d4c5e094f30fd700a860b204108a79236d00f734f
SSDEEP

6144:hts6RMrt0HEAT1fxhcMxW2pL7lv6w2K/PkFtR6sFHYnHFWhTyHVEOSQTQiJY7jMb:hm6RM2HEAJLjpFv6w2K/PkFtlVMHFWgC

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  beb262e942d7acaea015e161b87d85e6260d8aca972c6bbd18aea6afa70631a9
- Size
  
  370KB
- MD5
  
  8850eec0bd0c178b46864038615dabb0
- SHA1
  
  00cb79fcd28360f566b87289d55802cdb616470f
- SHA256
  
  beb262e942d7acaea015e161b87d85e6260d8aca972c6bbd18aea6afa70631a9
- SHA512
  
  9e70587c809feabfb2ed89cee43f7faaaf8b546f7cd1ae55ffcc86ea58fce44cc436adcbeee99074a4f1485d4c5e094f30fd700a860b204108a79236d00f734f
- SSDEEP
  
  6144:hts6RMrt0HEAT1fxhcMxW2pL7lv6w2K/PkFtR6sFHYnHFWhTyHVEOSQTQiJY7jMb:hm6RM2HEAJLjpFv6w2K/PkFtlVMHFWgC
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2