34944fffa0653ac168051be3f8b7133e1bd72f7ecb78330db52bb3b05bd30fb5 | Triage

Sharing

General

Target

34944fffa0653ac168051be3f8b7133e1bd72f7ecb78330db52bb3b05bd30fb5
Size

17KB
Sample

221127-ttgy1seg8w
MD5

b2e6b56e34c4bc4d3da91e7005b1b245
SHA1

e949566f92095a5cd1a4b072db977fac973a4604
SHA256

34944fffa0653ac168051be3f8b7133e1bd72f7ecb78330db52bb3b05bd30fb5
SHA512

6f9efed1b96f0efb3284f58a985666528b41edd72793bd2377d7f283ae183eef24a6561dbf2b72224f9cd512aafd60b1206166bf4baa4e955a59ac7726c1ab72
SSDEEP

384:1qhiINxgyfTR1IbGgcC32uMu3z8dmNPMXeE8GXB/mnVLavn3:MYitLRMGI2VdmN0XeE8u/icv

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  34944fffa0653ac168051be3f8b7133e1bd72f7ecb78330db52bb3b05bd30fb5
- Size
  
  17KB
- MD5
  
  b2e6b56e34c4bc4d3da91e7005b1b245
- SHA1
  
  e949566f92095a5cd1a4b072db977fac973a4604
- SHA256
  
  34944fffa0653ac168051be3f8b7133e1bd72f7ecb78330db52bb3b05bd30fb5
- SHA512
  
  6f9efed1b96f0efb3284f58a985666528b41edd72793bd2377d7f283ae183eef24a6561dbf2b72224f9cd512aafd60b1206166bf4baa4e955a59ac7726c1ab72
- SSDEEP
  
  384:1qhiINxgyfTR1IbGgcC32uMu3z8dmNPMXeE8GXB/mnVLavn3:MYitLRMGI2VdmN0XeE8u/icv
Score

10^/10

evasion persistence trojan
- Modifies visiblity of hidden/system files in Explorer
  evasion
- UAC bypass
  evasion trojan
- Adds policy Run key to start application
  persistence
- Blocklisted process makes network request
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Hidden Files and Directories

Modify Registry

Bypass User Account Control

Disabling Security Tools

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2