a3b3b7d29d7b46ffbe2836d86c1befe6e2ac45948b1bb5fdbc32819b7ca1449f | Triage

Sharing

General

Target

a3b3b7d29d7b46ffbe2836d86c1befe6e2ac45948b1bb5fdbc32819b7ca1449f
Size

391KB
Sample

221203-fxkx7abg6t
MD5

f8769b7cf2e32595e49bd06b4150398d
SHA1

6c3b3f6fb7837da87c229b4044aa35cd8bfb1253
SHA256

a3b3b7d29d7b46ffbe2836d86c1befe6e2ac45948b1bb5fdbc32819b7ca1449f
SHA512

88e4c32f835f543017af42d968da84dd5b4adae22dd25f0d3d7f953fe2e31deb6d5af41ca7b3bc058e6dc72b54f182547471a5fd55156449a1da268cdfe3be22
SSDEEP

12288:RtRMQHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:RtRMQkAJLjpFvN/ytkjEOfoMWN

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  a3b3b7d29d7b46ffbe2836d86c1befe6e2ac45948b1bb5fdbc32819b7ca1449f
- Size
  
  391KB
- MD5
  
  f8769b7cf2e32595e49bd06b4150398d
- SHA1
  
  6c3b3f6fb7837da87c229b4044aa35cd8bfb1253
- SHA256
  
  a3b3b7d29d7b46ffbe2836d86c1befe6e2ac45948b1bb5fdbc32819b7ca1449f
- SHA512
  
  88e4c32f835f543017af42d968da84dd5b4adae22dd25f0d3d7f953fe2e31deb6d5af41ca7b3bc058e6dc72b54f182547471a5fd55156449a1da268cdfe3be22
- SSDEEP
  
  12288:RtRMQHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:RtRMQkAJLjpFvN/ytkjEOfoMWN
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2