b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db | Triage

Sharing

General

Target

b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db
Size

368KB
Sample

221129-1hh59sdd91
MD5

ae720ae6b6439ec5eddcf65a1a8e55d7
SHA1

cf49a7da10aa7c5942cd688c02a31ae9ec68dc5d
SHA256

b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db
SHA512

41a984b44f58f48fe5a1955fc1b99c061f7c44f9f9fa7f2b76d981890ec0eeccbd366c213e675dfcf77e163c8d6ffd997ea0f5bd0095bf587035356b91a2b6a7
SSDEEP

6144:FORMrShrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:FORMQrpDneFNzino7IUHybPzQjUeX

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db
- Size
  
  368KB
- MD5
  
  ae720ae6b6439ec5eddcf65a1a8e55d7
- SHA1
  
  cf49a7da10aa7c5942cd688c02a31ae9ec68dc5d
- SHA256
  
  b8830486116dd91757e30721bbc4b44d0d9809c2f163aa59cbabf75cc34bb6db
- SHA512
  
  41a984b44f58f48fe5a1955fc1b99c061f7c44f9f9fa7f2b76d981890ec0eeccbd366c213e675dfcf77e163c8d6ffd997ea0f5bd0095bf587035356b91a2b6a7
- SSDEEP
  
  6144:FORMrShrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:FORMQrpDneFNzino7IUHybPzQjUeX
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2