82d04e84268b9a50a37667e37b4d068f39ac6f45cd74d6cf1dc09a216759f7d9 | Triage

Sharing

General

Target

82d04e84268b9a50a37667e37b4d068f39ac6f45cd74d6cf1dc09a216759f7d9
Size

384KB
Sample

221202-z8hfzsac5y
MD5

ce204dcb961da590c75ee6c4fd200323
SHA1

e9ad08f88c964350f1c50cbf7f7ba55612315463
SHA256

82d04e84268b9a50a37667e37b4d068f39ac6f45cd74d6cf1dc09a216759f7d9
SHA512

2eec4bb73fd8a93d75d97ac6bdbead2b63d41eb3dddbc08e3c4da6f785d2e1e91bc6b89dd175379a3c79e2590184b06ba32596378fc95b18cc5f86845efa070f
SSDEEP

6144:QA8jbF2llBGTOGIkkU+x5dRsYn3zRkACMXV1rsE8v9BC:QvclBGyGhYx5xDXXlOEIQ

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  82d04e84268b9a50a37667e37b4d068f39ac6f45cd74d6cf1dc09a216759f7d9
- Size
  
  384KB
- MD5
  
  ce204dcb961da590c75ee6c4fd200323
- SHA1
  
  e9ad08f88c964350f1c50cbf7f7ba55612315463
- SHA256
  
  82d04e84268b9a50a37667e37b4d068f39ac6f45cd74d6cf1dc09a216759f7d9
- SHA512
  
  2eec4bb73fd8a93d75d97ac6bdbead2b63d41eb3dddbc08e3c4da6f785d2e1e91bc6b89dd175379a3c79e2590184b06ba32596378fc95b18cc5f86845efa070f
- SSDEEP
  
  6144:QA8jbF2llBGTOGIkkU+x5dRsYn3zRkACMXV1rsE8v9BC:QvclBGyGhYx5xDXXlOEIQ
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2