8fc4d1169bbd17620af24afaf7e3392035eb9a0aa42345c2b0a78460385cb262 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fc4d1169bbd17620af24afaf7e3392035eb9a0aa42345c2b0a78460385cb262
Size

3.8MB
Sample

221201-jc3t2sfh43
MD5

ee36614308190e0a93a280f3292eda73
SHA1

4c823d38fb5334604ed3f3a29abec8bdbec3916b
SHA256

8fc4d1169bbd17620af24afaf7e3392035eb9a0aa42345c2b0a78460385cb262
SHA512

f3915d4cbbd62903b1b6ad01963eaa777da93d2614c45a51f6bc59197297d51365f6816e8bb539937dcc51091b5c3ee7f64905ce15dfd9edf50d973e1ed82ce7
SSDEEP

1536:iIyiOjNt88FRO3RcCdrVaJ2K6mcVO9o7Vu+2FpBp9hiy+:8iOjNtDFMqCdr8dcbL2RUy

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  8fc4d1169bbd17620af24afaf7e3392035eb9a0aa42345c2b0a78460385cb262
- Size
  
  3.8MB
- MD5
  
  ee36614308190e0a93a280f3292eda73
- SHA1
  
  4c823d38fb5334604ed3f3a29abec8bdbec3916b
- SHA256
  
  8fc4d1169bbd17620af24afaf7e3392035eb9a0aa42345c2b0a78460385cb262
- SHA512
  
  f3915d4cbbd62903b1b6ad01963eaa777da93d2614c45a51f6bc59197297d51365f6816e8bb539937dcc51091b5c3ee7f64905ce15dfd9edf50d973e1ed82ce7
- SSDEEP
  
  1536:iIyiOjNt88FRO3RcCdrVaJ2K6mcVO9o7Vu+2FpBp9hiy+:8iOjNtDFMqCdr8dcbL2RUy
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Modifies Windows Firewall
  evasion
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2