84f845162f4f5abd0607b67f19db01e5d55d29c8e4071999eacf82858ba217a4 | Triage

Sharing

General

Target

84f845162f4f5abd0607b67f19db01e5d55d29c8e4071999eacf82858ba217a4
Size

477KB
Sample

221201-cpymjaac5z
MD5

8e8432780963282ee178ad92ebe4e0b2
SHA1

f30ad90d7eb10d198af85f8770f84fdf8004f2f4
SHA256

84f845162f4f5abd0607b67f19db01e5d55d29c8e4071999eacf82858ba217a4
SHA512

96e0f800a0b2dc3734b282979e97c3d78a5d5fbff74ff9d7d9b2c03568f4138ee0bdee3a12290818c1383f186d93a4a6e00cb3f5eb511a0d5bd85d80df5fbf46
SSDEEP

6144:lzw4IjdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGey6:lwHeOkodHq9d+1U0rWSB7oCqB5Br/

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  84f845162f4f5abd0607b67f19db01e5d55d29c8e4071999eacf82858ba217a4
- Size
  
  477KB
- MD5
  
  8e8432780963282ee178ad92ebe4e0b2
- SHA1
  
  f30ad90d7eb10d198af85f8770f84fdf8004f2f4
- SHA256
  
  84f845162f4f5abd0607b67f19db01e5d55d29c8e4071999eacf82858ba217a4
- SHA512
  
  96e0f800a0b2dc3734b282979e97c3d78a5d5fbff74ff9d7d9b2c03568f4138ee0bdee3a12290818c1383f186d93a4a6e00cb3f5eb511a0d5bd85d80df5fbf46
- SSDEEP
  
  6144:lzw4IjdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGey6:lwHeOkodHq9d+1U0rWSB7oCqB5Br/
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2