c00727651c323e461645821625a4f69a0b77bd157706373734f8ee24bc66bfca | Triage

Sharing

General

Target

c00727651c323e461645821625a4f69a0b77bd157706373734f8ee24bc66bfca
Size

124KB
Sample

221127-w77gyadf3x
MD5

bba602f3628f39f7d62edaa80cfddfe5
SHA1

c71bbfb24984c162e59e2ffbb8be69a5153af28b
SHA256

c00727651c323e461645821625a4f69a0b77bd157706373734f8ee24bc66bfca
SHA512

c6697b21b69b74da7d2e5cb1900eb95b4d4ed1d63172c956771821d960c7f3487039bd13fc6e049945c9d9db4cfb85e81a5d112758538e6e1ec0e40e33976200
SSDEEP

1536:iQOwPGF+Nn76jBwEMxqElwfGwCwFEMxqER6jBaNnU6j5zpIqq21XrH2b7Zm:B1PGsN72GwZrNb5x1b+A

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  c00727651c323e461645821625a4f69a0b77bd157706373734f8ee24bc66bfca
- Size
  
  124KB
- MD5
  
  bba602f3628f39f7d62edaa80cfddfe5
- SHA1
  
  c71bbfb24984c162e59e2ffbb8be69a5153af28b
- SHA256
  
  c00727651c323e461645821625a4f69a0b77bd157706373734f8ee24bc66bfca
- SHA512
  
  c6697b21b69b74da7d2e5cb1900eb95b4d4ed1d63172c956771821d960c7f3487039bd13fc6e049945c9d9db4cfb85e81a5d112758538e6e1ec0e40e33976200
- SSDEEP
  
  1536:iQOwPGF+Nn76jBwEMxqElwfGwCwFEMxqER6jBaNnU6j5zpIqq21XrH2b7Zm:B1PGsN72GwZrNb5x1b+A
Score

10^/10

evasion persistence trojan
- Modifies visiblity of hidden/system files in Explorer
  evasion
- UAC bypass
  evasion trojan
- Adds policy Run key to start application
  persistence
- Blocklisted process makes network request
- Disables taskbar notifications via registry modification
  evasion
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2