f52af126637024194a077c43cf6639c4c30e4a76281f7366647cd07e9fed1b76 | Triage

Sharing

General

Target

f52af126637024194a077c43cf6639c4c30e4a76281f7366647cd07e9fed1b76
Size

352KB
Sample

221206-172znshe26
MD5

37713b88a19d80bac4ca0823da795a08
SHA1

fbec856ca02395bf0ab6e4baaba2b1a295c8b4fa
SHA256

f52af126637024194a077c43cf6639c4c30e4a76281f7366647cd07e9fed1b76
SHA512

9358d5f2d54636320f783340a42ccbb9999b2e3a4c919b24087c0f1ab457dfb3a31faa6aa024ca1f7dc6c0f7849bc2b8dbdd230d43a24e4681b5dbeb79409958
SSDEEP

6144:gt4yV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/Xt9/w:FyUuJbB5tNFX7B3JusP/d9o

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  f52af126637024194a077c43cf6639c4c30e4a76281f7366647cd07e9fed1b76
- Size
  
  352KB
- MD5
  
  37713b88a19d80bac4ca0823da795a08
- SHA1
  
  fbec856ca02395bf0ab6e4baaba2b1a295c8b4fa
- SHA256
  
  f52af126637024194a077c43cf6639c4c30e4a76281f7366647cd07e9fed1b76
- SHA512
  
  9358d5f2d54636320f783340a42ccbb9999b2e3a4c919b24087c0f1ab457dfb3a31faa6aa024ca1f7dc6c0f7849bc2b8dbdd230d43a24e4681b5dbeb79409958
- SSDEEP
  
  6144:gt4yV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/Xt9/w:FyUuJbB5tNFX7B3JusP/d9o
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2