7e209a600751ae0f07435dc84b76dabb12da3917d6e8626b5b678668a4d88a55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e209a600751ae0f07435dc84b76dabb12da3917d6e8626b5b678668a4d88a55
Size

568KB
Sample

221201-c9ncasca4x
MD5

1cfb929723cb6fe18ea1cdd2584d21e3
SHA1

1e1ce35f44e75b56b38d8f0bb349a76dead96d54
SHA256

7e209a600751ae0f07435dc84b76dabb12da3917d6e8626b5b678668a4d88a55
SHA512

c063c17091877a7adb457ee1cee72c6cb9a29b3e489b59588dfb6c8748a97569dca0b7e0fc10da4646ca57801da1331e32a7f172f6cccb375b3ec0b8f13513af
SSDEEP

12288:RejgFtDm9hQMdblcPd7USXYaC8LHnu2w4V5LO:ResFFm9hQElimcHS4VN

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  7e209a600751ae0f07435dc84b76dabb12da3917d6e8626b5b678668a4d88a55
- Size
  
  568KB
- MD5
  
  1cfb929723cb6fe18ea1cdd2584d21e3
- SHA1
  
  1e1ce35f44e75b56b38d8f0bb349a76dead96d54
- SHA256
  
  7e209a600751ae0f07435dc84b76dabb12da3917d6e8626b5b678668a4d88a55
- SHA512
  
  c063c17091877a7adb457ee1cee72c6cb9a29b3e489b59588dfb6c8748a97569dca0b7e0fc10da4646ca57801da1331e32a7f172f6cccb375b3ec0b8f13513af
- SSDEEP
  
  12288:RejgFtDm9hQMdblcPd7USXYaC8LHnu2w4V5LO:ResFFm9hQElimcHS4VN
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2