91d9e31994e947cfc7b388eb58422262e99caf720fb9b5d2bca6f1138634a448 | Triage

Sharing

General

Target

91d9e31994e947cfc7b388eb58422262e99caf720fb9b5d2bca6f1138634a448
Size

367KB
Sample

221201-bm1hnsfa6z
MD5

1b10a6b9e416a095f031fdab729a984d
SHA1

aeda8e8e3784c7fd066efafe4c2be41f4e9820a3
SHA256

91d9e31994e947cfc7b388eb58422262e99caf720fb9b5d2bca6f1138634a448
SHA512

add121abaf9b6b0b475888769feab7cbc2f7faa14720a43c87203778daaef57fe85d08d862be1e4d05264597bcc993eee5890f11d52043c9830e3c83d0066cc3
SSDEEP

6144:ncvA2RMKbhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:chRMKdrpDneFNzino7IUHybPzQjUeX

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  91d9e31994e947cfc7b388eb58422262e99caf720fb9b5d2bca6f1138634a448
- Size
  
  367KB
- MD5
  
  1b10a6b9e416a095f031fdab729a984d
- SHA1
  
  aeda8e8e3784c7fd066efafe4c2be41f4e9820a3
- SHA256
  
  91d9e31994e947cfc7b388eb58422262e99caf720fb9b5d2bca6f1138634a448
- SHA512
  
  add121abaf9b6b0b475888769feab7cbc2f7faa14720a43c87203778daaef57fe85d08d862be1e4d05264597bcc993eee5890f11d52043c9830e3c83d0066cc3
- SSDEEP
  
  6144:ncvA2RMKbhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:chRMKdrpDneFNzino7IUHybPzQjUeX
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2