97811e2ebddd41eaab62c04050437de03fec3c52aced0cb47ee58c3ef004f8da | Triage

Sharing

General

Target

97811e2ebddd41eaab62c04050437de03fec3c52aced0cb47ee58c3ef004f8da
Size

420KB
Sample

221129-fjn3pafh24
MD5

cff2d9555e0639b93f1671ed6a712726
SHA1

62ff7739b29f3a4710b89a23d742cbe3f86ed34b
SHA256

97811e2ebddd41eaab62c04050437de03fec3c52aced0cb47ee58c3ef004f8da
SHA512

90506296081474fd4e347a3779290d3f266508336eb690f57ee4cd26481b457ac68a9b4964cc84e7056b32bd59440d6ada4837d1782cfc363713f1f746de52c6
SSDEEP

12288:SxOoQ86y8Vezlmi3lHbF2MBTad+sp/BK9wb+Ha:Swl86y8qlmi9bF2LdrpJo6O

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  97811e2ebddd41eaab62c04050437de03fec3c52aced0cb47ee58c3ef004f8da
- Size
  
  420KB
- MD5
  
  cff2d9555e0639b93f1671ed6a712726
- SHA1
  
  62ff7739b29f3a4710b89a23d742cbe3f86ed34b
- SHA256
  
  97811e2ebddd41eaab62c04050437de03fec3c52aced0cb47ee58c3ef004f8da
- SHA512
  
  90506296081474fd4e347a3779290d3f266508336eb690f57ee4cd26481b457ac68a9b4964cc84e7056b32bd59440d6ada4837d1782cfc363713f1f746de52c6
- SSDEEP
  
  12288:SxOoQ86y8Vezlmi3lHbF2MBTad+sp/BK9wb+Ha:Swl86y8qlmi9bF2LdrpJo6O
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2