8051d2e4525cd2be8635c7a3ecbe7c3ee28665ea84d5f259682b62a3f98cf91d | Triage

Sharing

General

Target

8051d2e4525cd2be8635c7a3ecbe7c3ee28665ea84d5f259682b62a3f98cf91d
Size

453KB
Sample

221129-hwwdmsag2t
MD5

7af0f2a50496b02d36fc2ce273a48470
SHA1

44810f37ba1d1ee71ce2953833b76203c060f0ba
SHA256

8051d2e4525cd2be8635c7a3ecbe7c3ee28665ea84d5f259682b62a3f98cf91d
SHA512

765c755c0ca8336bd11f45881ca9121cdcd4d4fa67b744d538d8af980c9a121668736c30e5f160e66e0d070045e994f609d7bb9852c229aeebb6fa832d834b5a
SSDEEP

12288:4fJ/ZD4b55K7gvvr4sE7l3XWEZLorcjks/3fl5JF67cOn7qp:4fJ+5w3zZ8rcksPf67cuq

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8051d2e4525cd2be8635c7a3ecbe7c3ee28665ea84d5f259682b62a3f98cf91d
- Size
  
  453KB
- MD5
  
  7af0f2a50496b02d36fc2ce273a48470
- SHA1
  
  44810f37ba1d1ee71ce2953833b76203c060f0ba
- SHA256
  
  8051d2e4525cd2be8635c7a3ecbe7c3ee28665ea84d5f259682b62a3f98cf91d
- SHA512
  
  765c755c0ca8336bd11f45881ca9121cdcd4d4fa67b744d538d8af980c9a121668736c30e5f160e66e0d070045e994f609d7bb9852c229aeebb6fa832d834b5a
- SSDEEP
  
  12288:4fJ/ZD4b55K7gvvr4sE7l3XWEZLorcjks/3fl5JF67cOn7qp:4fJ+5w3zZ8rcksPf67cuq
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan