9076fcb47bb5f26685c74cf37331e9b65361c287b5befe0348732f5eb871d1da | Triage

Sharing

General

Target

9076fcb47bb5f26685c74cf37331e9b65361c287b5befe0348732f5eb871d1da
Size

456KB
Sample

221203-fwj99sgd67
MD5

8e9f4d5f8704f162cb83459540cd3544
SHA1

996d25bedaaef7d5fb5ebe81750e3d4f69e1c83c
SHA256

9076fcb47bb5f26685c74cf37331e9b65361c287b5befe0348732f5eb871d1da
SHA512

f24451e129306926b016a11e711d2336f4653fb00763110b8e0f31db82d914dd1d04ce13112a936524bf0391f6c77383a62185ecd2aeb9de59e7fad643f66a12
SSDEEP

12288:BgR3CljrXkaEscleOjhXQRYWtHNr/gxFSr6pFmRb:eR3CxLkanCeOwzTriQrwFmZ

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  9076fcb47bb5f26685c74cf37331e9b65361c287b5befe0348732f5eb871d1da
- Size
  
  456KB
- MD5
  
  8e9f4d5f8704f162cb83459540cd3544
- SHA1
  
  996d25bedaaef7d5fb5ebe81750e3d4f69e1c83c
- SHA256
  
  9076fcb47bb5f26685c74cf37331e9b65361c287b5befe0348732f5eb871d1da
- SHA512
  
  f24451e129306926b016a11e711d2336f4653fb00763110b8e0f31db82d914dd1d04ce13112a936524bf0391f6c77383a62185ecd2aeb9de59e7fad643f66a12
- SSDEEP
  
  12288:BgR3CljrXkaEscleOjhXQRYWtHNr/gxFSr6pFmRb:eR3CxLkanCeOwzTriQrwFmZ
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2