8201d7a2d67b3ce5c06018b19a9826606157d15b6c3e50a6aeab57a3513b0125 | Triage

Sharing

General

Target

8201d7a2d67b3ce5c06018b19a9826606157d15b6c3e50a6aeab57a3513b0125
Size

424KB
Sample

221129-hn97tsaa7s
MD5

faf11dcdaa40e8af4003674f376bae71
SHA1

5cc9037a7aca70350a36d8d906cbce192764432f
SHA256

8201d7a2d67b3ce5c06018b19a9826606157d15b6c3e50a6aeab57a3513b0125
SHA512

5f61cba21344149ee9ac364caf0521690037ad364b214471af563a9c83ccbe50e8e6c58358bbfe7a142f21e916bd20d23c9278034eca6d5161c6620fc7e70eb0
SSDEEP

12288:sgosdJCqVjvadtGDQdqX4TnIovgkvNaKl:sgFnCYjvadtqDXYnIo1Vr

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8201d7a2d67b3ce5c06018b19a9826606157d15b6c3e50a6aeab57a3513b0125
- Size
  
  424KB
- MD5
  
  faf11dcdaa40e8af4003674f376bae71
- SHA1
  
  5cc9037a7aca70350a36d8d906cbce192764432f
- SHA256
  
  8201d7a2d67b3ce5c06018b19a9826606157d15b6c3e50a6aeab57a3513b0125
- SHA512
  
  5f61cba21344149ee9ac364caf0521690037ad364b214471af563a9c83ccbe50e8e6c58358bbfe7a142f21e916bd20d23c9278034eca6d5161c6620fc7e70eb0
- SSDEEP
  
  12288:sgosdJCqVjvadtGDQdqX4TnIovgkvNaKl:sgFnCYjvadtqDXYnIo1Vr
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2