9331b11f2dc7d1d2418afd2353c8d54667dbfa73bedffa95bfeeec60c0f49589 | Triage

Submit
Reports

Overview

overview

Static

static

9331b11f2d...89.exe

windows7-x64

9331b11f2d...89.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

9331b11f2dc7d1d2418afd2353c8d54667dbfa73bedffa95bfeeec60c0f49589
Size

284KB
Sample

221205-z4a64sge78
MD5

c931625bd62e3ec7c39cd3670fa1d823
SHA1

851f15db032fb1a7be90c94ad0b4115502bde754
SHA256

9331b11f2dc7d1d2418afd2353c8d54667dbfa73bedffa95bfeeec60c0f49589
SHA512

14c2401b892cb282f7ed2d64cad1d832ff6467573a0ba232827b14089caa5bdcc82bc129e49da40648ee282f093510168f5d55b676d08c7af3833fb8f7e6c5a4
SSDEEP

6144:3KbDa37D80pjh9cV3VaowYoKY2K/lVQgOKZfMP2bPBjLIl48Bh:aqLDbjc5V9wYFwVQOs2rBjkl1h

Score

10^/10

evasion persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

9331b11f2dc7d1d2418afd2353c8d54667dbfa73bedffa95bfeeec60c0f49589.exe

Resource

win7-20220812-en

evasion persistence trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

9331b11f2dc7d1d2418afd2353c8d54667dbfa73bedffa95bfeeec60c0f49589.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  9331b11f2dc7d1d2418afd2353c8d54667dbfa73bedffa95bfeeec60c0f49589
- Size
  
  284KB
- MD5
  
  c931625bd62e3ec7c39cd3670fa1d823
- SHA1
  
  851f15db032fb1a7be90c94ad0b4115502bde754
- SHA256
  
  9331b11f2dc7d1d2418afd2353c8d54667dbfa73bedffa95bfeeec60c0f49589
- SHA512
  
  14c2401b892cb282f7ed2d64cad1d832ff6467573a0ba232827b14089caa5bdcc82bc129e49da40648ee282f093510168f5d55b676d08c7af3833fb8f7e6c5a4
- SSDEEP
  
  6144:3KbDa37D80pjh9cV3VaowYoKY2K/lVQgOKZfMP2bPBjLIl48Bh:aqLDbjc5V9wYFwVQOs2rBjkl1h
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

© 2018-2025

Terms | Privacy