c441c0421ae8102a8a181e946c3f93eada32b500a5edae6013d96bddba39d46e | Triage

Sharing

General

Target

c441c0421ae8102a8a181e946c3f93eada32b500a5edae6013d96bddba39d46e
Size

412KB
Sample

221203-kveqlscf8s
MD5

1221483385ff8e589ec467ca54326ed0
SHA1

63d246567852ddcebc662f065cac88301ec69c5b
SHA256

c441c0421ae8102a8a181e946c3f93eada32b500a5edae6013d96bddba39d46e
SHA512

0bd48d2049d9b2f0481a7462d8ad0a7922e03b2e17dfcd2abdc694ba70a51d6929b6b8caead327c50210b3d67a0f9b398d8eac393eaf01dafae832856ef1b968
SSDEEP

6144:tm/2pvG7cUeq4DK3N6DGrnpGIfEpiYqB0sEjP3WbV9QBVTwvhdTE5sNg2r:tVP23zvfEpiYq0sVbrnhSCK2

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  c441c0421ae8102a8a181e946c3f93eada32b500a5edae6013d96bddba39d46e
- Size
  
  412KB
- MD5
  
  1221483385ff8e589ec467ca54326ed0
- SHA1
  
  63d246567852ddcebc662f065cac88301ec69c5b
- SHA256
  
  c441c0421ae8102a8a181e946c3f93eada32b500a5edae6013d96bddba39d46e
- SHA512
  
  0bd48d2049d9b2f0481a7462d8ad0a7922e03b2e17dfcd2abdc694ba70a51d6929b6b8caead327c50210b3d67a0f9b398d8eac393eaf01dafae832856ef1b968
- SSDEEP
  
  6144:tm/2pvG7cUeq4DK3N6DGrnpGIfEpiYqB0sEjP3WbV9QBVTwvhdTE5sNg2r:tVP23zvfEpiYq0sVbrnhSCK2
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2