ca4b3d1718a2b0bf7078beab2a14907e3e03d1121157a7e9eb552aecc768e251 | Triage

Sharing

General

Target

ca4b3d1718a2b0bf7078beab2a14907e3e03d1121157a7e9eb552aecc768e251
Size

372KB
Sample

221201-wakxnscf74
MD5

66673c48efda719a783a5b3821bb044b
SHA1

13b18dd879484e5ae9e47f781544f0159995e0b3
SHA256

ca4b3d1718a2b0bf7078beab2a14907e3e03d1121157a7e9eb552aecc768e251
SHA512

482419c6b7cf25ec63e6ed5d349a2d98af2e0609026d7c11d4e6bb76487712626388eb13f8310fc7b2eaa13349931b1bcacde392fb4aae3854469f9aef9364c6
SSDEEP

6144:+jjvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:+nvjVkCrSvoZNyl5fwD

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  ca4b3d1718a2b0bf7078beab2a14907e3e03d1121157a7e9eb552aecc768e251
- Size
  
  372KB
- MD5
  
  66673c48efda719a783a5b3821bb044b
- SHA1
  
  13b18dd879484e5ae9e47f781544f0159995e0b3
- SHA256
  
  ca4b3d1718a2b0bf7078beab2a14907e3e03d1121157a7e9eb552aecc768e251
- SHA512
  
  482419c6b7cf25ec63e6ed5d349a2d98af2e0609026d7c11d4e6bb76487712626388eb13f8310fc7b2eaa13349931b1bcacde392fb4aae3854469f9aef9364c6
- SSDEEP
  
  6144:+jjvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:+nvjVkCrSvoZNyl5fwD
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2