1d455f3c1f83874b478312399cea7d487eee7c64c6253d9e297e27a414fc225f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d455f3c1f83874b478312399cea7d487eee7c64c6253d9e297e27a414fc225f
Size

404KB
Sample

221128-c3bd6ahb47
MD5

8d1b56967cd08b3dbaaf4f41983ff4ad
SHA1

b50b9366e5e0273533278483b863b3714e1911e8
SHA256

1d455f3c1f83874b478312399cea7d487eee7c64c6253d9e297e27a414fc225f
SHA512

cd766880bceea5d41a4790680d2844dc16e54403d45e352f6a1df343f7791b9a042e3dadce9f52a0312ffa512f1473555ce9e073d9ed974ec289b7a17edb84d2
SSDEEP

6144:B5mg2tX35+/zRdYkZzFcyII5d4FCGhK81af97Tb7HPZDL4ft0zXdDa3IBABJ13Tn:45+/FukVFcyIOd4tE0k3bWfsFoJEcaQ

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1d455f3c1f83874b478312399cea7d487eee7c64c6253d9e297e27a414fc225f
- Size
  
  404KB
- MD5
  
  8d1b56967cd08b3dbaaf4f41983ff4ad
- SHA1
  
  b50b9366e5e0273533278483b863b3714e1911e8
- SHA256
  
  1d455f3c1f83874b478312399cea7d487eee7c64c6253d9e297e27a414fc225f
- SHA512
  
  cd766880bceea5d41a4790680d2844dc16e54403d45e352f6a1df343f7791b9a042e3dadce9f52a0312ffa512f1473555ce9e073d9ed974ec289b7a17edb84d2
- SSDEEP
  
  6144:B5mg2tX35+/zRdYkZzFcyII5d4FCGhK81af97Tb7HPZDL4ft0zXdDa3IBABJ13Tn:45+/FukVFcyIOd4tE0k3bWfsFoJEcaQ
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2