efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c
Size

352KB
Sample

221204-ch7xmacb9x
MD5

1a9c7e67fee0bd287509a34382d91c59
SHA1

28944e2eb4a512764f20cc0d71f3ffaad9b7de31
SHA256

efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c
SHA512

955dd0cc51295719bce2d2daa40e697cd63e6678028d5da737cdf76b59fbedac4ecbf2d8c93882b9ab4ebc5061cb9baab8e080bb8c932fdaadb4da4e13abea9c
SSDEEP

6144:siG1HlQiadBxsp1vmCO02ugWmhPPaqTtznImkYcskO025PQ29ms:siGAi+BoKNugGKt87akh0PQ0m

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c
- Size
  
  352KB
- MD5
  
  1a9c7e67fee0bd287509a34382d91c59
- SHA1
  
  28944e2eb4a512764f20cc0d71f3ffaad9b7de31
- SHA256
  
  efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c
- SHA512
  
  955dd0cc51295719bce2d2daa40e697cd63e6678028d5da737cdf76b59fbedac4ecbf2d8c93882b9ab4ebc5061cb9baab8e080bb8c932fdaadb4da4e13abea9c
- SSDEEP
  
  6144:siG1HlQiadBxsp1vmCO02ugWmhPPaqTtznImkYcskO025PQ29ms:siGAi+BoKNugGKt87akh0PQ0m
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2