c725dbb766baae01124069b08f50e7fc9cb528cd589787fadd8cbb02d49b6a1a | Triage

Sharing

General

Target

c725dbb766baae01124069b08f50e7fc9cb528cd589787fadd8cbb02d49b6a1a
Size

2.1MB
Sample

221205-x3cx7sbh5t
MD5

1207c3fa6aca6423d82843958c6b566b
SHA1

67a6ee64f744ab9df86bbc74132934a9a6613dfc
SHA256

c725dbb766baae01124069b08f50e7fc9cb528cd589787fadd8cbb02d49b6a1a
SHA512

6e463b9db32dbc1a78fc5f202a56f3ca259cba4e7c868912b686d666a8347dd8e289ada3bdea22449f9ccd07ae1537832c74b8f321bdf15d825aef57272b52d5
SSDEEP

24576:LmY2FUYkUQXYuHnvrCRpeVTWPHW5ER43ZpjnN/3W8HON1h:KUU8YuHT7TWPH+ERuznN/3WH1h

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  c725dbb766baae01124069b08f50e7fc9cb528cd589787fadd8cbb02d49b6a1a
- Size
  
  2.1MB
- MD5
  
  1207c3fa6aca6423d82843958c6b566b
- SHA1
  
  67a6ee64f744ab9df86bbc74132934a9a6613dfc
- SHA256
  
  c725dbb766baae01124069b08f50e7fc9cb528cd589787fadd8cbb02d49b6a1a
- SHA512
  
  6e463b9db32dbc1a78fc5f202a56f3ca259cba4e7c868912b686d666a8347dd8e289ada3bdea22449f9ccd07ae1537832c74b8f321bdf15d825aef57272b52d5
- SSDEEP
  
  24576:LmY2FUYkUQXYuHnvrCRpeVTWPHW5ER43ZpjnN/3W8HON1h:KUU8YuHT7TWPH+ERuznN/3WH1h
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Modifies Windows Firewall
  evasion
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2