0526fc8fa91c3ad5d02e9ff1c79c565377f18d7b69a923f8a5123b14c4b1fcd3 | Triage

Sharing

General

Target

0526fc8fa91c3ad5d02e9ff1c79c565377f18d7b69a923f8a5123b14c4b1fcd3
Size

368KB
Sample

221129-1hjrssde2v
MD5

036c65839027174db6200a5849799b80
SHA1

943ba296eddd5d41b0a42d07c0ab1b6c09dd3572
SHA256

0526fc8fa91c3ad5d02e9ff1c79c565377f18d7b69a923f8a5123b14c4b1fcd3
SHA512

3c5499c55be00a72b8d3b54f2923bed7f9dcad8f207c93ced2c9b45f2ee984f5b5f1c12dd0fa3d1fe05b669ec0b586ea34f1eeee7b756e0cedf8fa721da795bc
SSDEEP

6144:7qlRMahrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:7qlRMErpDneFNzino7IUHybPzQjUeX

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0526fc8fa91c3ad5d02e9ff1c79c565377f18d7b69a923f8a5123b14c4b1fcd3
- Size
  
  368KB
- MD5
  
  036c65839027174db6200a5849799b80
- SHA1
  
  943ba296eddd5d41b0a42d07c0ab1b6c09dd3572
- SHA256
  
  0526fc8fa91c3ad5d02e9ff1c79c565377f18d7b69a923f8a5123b14c4b1fcd3
- SHA512
  
  3c5499c55be00a72b8d3b54f2923bed7f9dcad8f207c93ced2c9b45f2ee984f5b5f1c12dd0fa3d1fe05b669ec0b586ea34f1eeee7b756e0cedf8fa721da795bc
- SSDEEP
  
  6144:7qlRMahrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:7qlRMErpDneFNzino7IUHybPzQjUeX
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2