9bbfda80cb7c75330cf0d4a10f02cd9ac0e134a26f9205a5a28ccad1bdb20570 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bbfda80cb7c75330cf0d4a10f02cd9ac0e134a26f9205a5a28ccad1bdb20570
Size

554KB
Sample

221129-e8ygzseg74
MD5

1628bb4a6d89606751da4f642f9adde8
SHA1

992fa9224b865a784fd9a16e6138df64a2a6e7f9
SHA256

9bbfda80cb7c75330cf0d4a10f02cd9ac0e134a26f9205a5a28ccad1bdb20570
SHA512

a97d749002bc678e4c164c93cb8ea97e3a375a62b4192e8e49d0d94a402f3335a772c0bed86a78bf54d243164784a21fa4085ae4956b5850acf6c764575c9c37
SSDEEP

6144:c/2UpNxg3Nx2aezoc6m2hTZY5hFOJmDzmKW7cjBOQDXK/ZZ9J2eJ8++Flq:02UK328bLwFOQDzmNUB7i7VcF

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  9bbfda80cb7c75330cf0d4a10f02cd9ac0e134a26f9205a5a28ccad1bdb20570
- Size
  
  554KB
- MD5
  
  1628bb4a6d89606751da4f642f9adde8
- SHA1
  
  992fa9224b865a784fd9a16e6138df64a2a6e7f9
- SHA256
  
  9bbfda80cb7c75330cf0d4a10f02cd9ac0e134a26f9205a5a28ccad1bdb20570
- SHA512
  
  a97d749002bc678e4c164c93cb8ea97e3a375a62b4192e8e49d0d94a402f3335a772c0bed86a78bf54d243164784a21fa4085ae4956b5850acf6c764575c9c37
- SSDEEP
  
  6144:c/2UpNxg3Nx2aezoc6m2hTZY5hFOJmDzmKW7cjBOQDXK/ZZ9J2eJ8++Flq:02UK328bLwFOQDzmNUB7i7VcF
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2