cb7b55968ccb4efbfa3dd112fbee2e869cfa20750f740c0f030cae0512393d57 | Triage

Sharing

General

Target

cb7b55968ccb4efbfa3dd112fbee2e869cfa20750f740c0f030cae0512393d57
Size

456KB
Sample

221203-fv6rwabf6y
MD5

ccc95c4243aa395a116281ba1ab6072c
SHA1

94e65f491bca1ee415e9cbeb973c6bc359b1bb8b
SHA256

cb7b55968ccb4efbfa3dd112fbee2e869cfa20750f740c0f030cae0512393d57
SHA512

dd79446ee400e7997fb1af2bb6d04105f0631093125da755bd0170bf7d6e519b45bde4e647c4fca5821bc82660092e6ead0e9cc92835e564ea9db7e81eab70aa
SSDEEP

12288:ZgR3Clj7RQrfH09f3fDMY0s7Qzkx8hllltyVkrRsN9Oqo24JV:GR3Cx7Rk8PfEhlIkrRCa

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  cb7b55968ccb4efbfa3dd112fbee2e869cfa20750f740c0f030cae0512393d57
- Size
  
  456KB
- MD5
  
  ccc95c4243aa395a116281ba1ab6072c
- SHA1
  
  94e65f491bca1ee415e9cbeb973c6bc359b1bb8b
- SHA256
  
  cb7b55968ccb4efbfa3dd112fbee2e869cfa20750f740c0f030cae0512393d57
- SHA512
  
  dd79446ee400e7997fb1af2bb6d04105f0631093125da755bd0170bf7d6e519b45bde4e647c4fca5821bc82660092e6ead0e9cc92835e564ea9db7e81eab70aa
- SSDEEP
  
  12288:ZgR3Clj7RQrfH09f3fDMY0s7Qzkx8hllltyVkrRsN9Oqo24JV:GR3Cx7Rk8PfEhlIkrRCa
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2