8fc2ab8c4220b98e07b74de2e01d2789499033776ae7544a607571bddf25949f | Triage

Sharing

General

Target

8fc2ab8c4220b98e07b74de2e01d2789499033776ae7544a607571bddf25949f
Size

371KB
Sample

221129-1hhjqsdd9y
MD5

7c20bfd31f79c18d618a9ecd5e45b056
SHA1

b15e4c5e1a3dac806a0f4be4334599b3ef3d7a2d
SHA256

8fc2ab8c4220b98e07b74de2e01d2789499033776ae7544a607571bddf25949f
SHA512

6e69e2ec9616d5de64808f05ecf726fe938916b6872de917b4d336bbefa0179ed5fb1e696ee6abbcad7110cad59c303aa734f52d0818f525d8ac34f15c71eac9
SSDEEP

6144:n/4DRMBDKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1Ku:ngDRMDL9/u5Wcxr8/frTzcNS0G3fDsft

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8fc2ab8c4220b98e07b74de2e01d2789499033776ae7544a607571bddf25949f
- Size
  
  371KB
- MD5
  
  7c20bfd31f79c18d618a9ecd5e45b056
- SHA1
  
  b15e4c5e1a3dac806a0f4be4334599b3ef3d7a2d
- SHA256
  
  8fc2ab8c4220b98e07b74de2e01d2789499033776ae7544a607571bddf25949f
- SHA512
  
  6e69e2ec9616d5de64808f05ecf726fe938916b6872de917b4d336bbefa0179ed5fb1e696ee6abbcad7110cad59c303aa734f52d0818f525d8ac34f15c71eac9
- SSDEEP
  
  6144:n/4DRMBDKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1Ku:ngDRMDL9/u5Wcxr8/frTzcNS0G3fDsft
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2