c4f50649609e933937c9fe9d708126e78fd0ca247c6a9f518c168226c8762f49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4f50649609e933937c9fe9d708126e78fd0ca247c6a9f518c168226c8762f49
Size

456KB
Sample

221206-cqvbhagf73
MD5

52b890af482e16660a72bdaf81df42c4
SHA1

a341f8845abe934c15736eb90cbf6465a277346f
SHA256

c4f50649609e933937c9fe9d708126e78fd0ca247c6a9f518c168226c8762f49
SHA512

fd50d85c066de07d04d2a07ef5935fe305616b40bd1df4e56625745bb1699709ff1893f583881a7254944d00fa9c61c72ee48add72e93322fbbf1602c763848f
SSDEEP

12288:0L+WyxjH7hvTQQQ3VncdmRLkHozkOeTqRBbtgY88BMiZa6:2+WyVbpTQmXH6kOeGLNan

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  c4f50649609e933937c9fe9d708126e78fd0ca247c6a9f518c168226c8762f49
- Size
  
  456KB
- MD5
  
  52b890af482e16660a72bdaf81df42c4
- SHA1
  
  a341f8845abe934c15736eb90cbf6465a277346f
- SHA256
  
  c4f50649609e933937c9fe9d708126e78fd0ca247c6a9f518c168226c8762f49
- SHA512
  
  fd50d85c066de07d04d2a07ef5935fe305616b40bd1df4e56625745bb1699709ff1893f583881a7254944d00fa9c61c72ee48add72e93322fbbf1602c763848f
- SSDEEP
  
  12288:0L+WyxjH7hvTQQQ3VncdmRLkHozkOeTqRBbtgY88BMiZa6:2+WyVbpTQmXH6kOeGLNan
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2