9e788bb39caa79019f34d2cf44bf7960696a3be425232e2eee71fac3cea48d25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e788bb39caa79019f34d2cf44bf7960696a3be425232e2eee71fac3cea48d25
Size

104KB
Sample

221205-xzwk5sbf6x
MD5

0c363e068f1eb2fe67484d6008a0b12f
SHA1

b7bc32605e6ea961a32e5397f30c4f60caea7dbb
SHA256

9e788bb39caa79019f34d2cf44bf7960696a3be425232e2eee71fac3cea48d25
SHA512

00e2e69b2b5e310abe3a14e4fcf119be80ce06a829e900404a01fa0df702541b1db334a779ec7db4bfc80c4d1e58b0aea319fa1cdeddcd52d7edd77ce8716412
SSDEEP

1536:ndS1EAd4kkVIIY4eKnjJ0ty+bHG8SQT7fs6QSZguRpvmH:dgEAQIIYJKnu1bHhz1Y

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  9e788bb39caa79019f34d2cf44bf7960696a3be425232e2eee71fac3cea48d25
- Size
  
  104KB
- MD5
  
  0c363e068f1eb2fe67484d6008a0b12f
- SHA1
  
  b7bc32605e6ea961a32e5397f30c4f60caea7dbb
- SHA256
  
  9e788bb39caa79019f34d2cf44bf7960696a3be425232e2eee71fac3cea48d25
- SHA512
  
  00e2e69b2b5e310abe3a14e4fcf119be80ce06a829e900404a01fa0df702541b1db334a779ec7db4bfc80c4d1e58b0aea319fa1cdeddcd52d7edd77ce8716412
- SSDEEP
  
  1536:ndS1EAd4kkVIIY4eKnjJ0ty+bHG8SQT7fs6QSZguRpvmH:dgEAQIIYJKnu1bHhz1Y
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2