6ae6471208f942cd7f50bbfa73457d275034e86fbabd0cafc96683e49403aeb7 | Triage

Sharing

General

Target

6ae6471208f942cd7f50bbfa73457d275034e86fbabd0cafc96683e49403aeb7
Size

411KB
Sample

221201-d6zftsef9t
MD5

5e9c1d73611deb27b18ee53e7f87c1b0
SHA1

14980ad09c239c67774eb04ffdaecced87be3047
SHA256

6ae6471208f942cd7f50bbfa73457d275034e86fbabd0cafc96683e49403aeb7
SHA512

05e53eed230e4722345fa347abeef36b7401c02460feaa6717a6fe9db9cc2475025c77f11e7ef3c90ae78268503a74d042b182bc70aa71b1cd786e657aee3156
SSDEEP

6144:UQBIY1t7B0BvqvWqG2P1vPSzrZGe3BmwxRBO3ocaTQsSvFCCLoQlvHoKekDRvRYc:LIY1RB0hFf2JazbNvs2WCCdhlRCcRfH

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  6ae6471208f942cd7f50bbfa73457d275034e86fbabd0cafc96683e49403aeb7
- Size
  
  411KB
- MD5
  
  5e9c1d73611deb27b18ee53e7f87c1b0
- SHA1
  
  14980ad09c239c67774eb04ffdaecced87be3047
- SHA256
  
  6ae6471208f942cd7f50bbfa73457d275034e86fbabd0cafc96683e49403aeb7
- SHA512
  
  05e53eed230e4722345fa347abeef36b7401c02460feaa6717a6fe9db9cc2475025c77f11e7ef3c90ae78268503a74d042b182bc70aa71b1cd786e657aee3156
- SSDEEP
  
  6144:UQBIY1t7B0BvqvWqG2P1vPSzrZGe3BmwxRBO3ocaTQsSvFCCLoQlvHoKekDRvRYc:LIY1RB0hFf2JazbNvs2WCCdhlRCcRfH
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2