c2c54fa612e7ed3b3b815b0be01c9341f98141c9ef55aff4fb06c919017bf840 | Triage

Sharing

General

Target

c2c54fa612e7ed3b3b815b0be01c9341f98141c9ef55aff4fb06c919017bf840
Size

404KB
Sample

221206-cr3n9sbf4x
MD5

a73d822489f4eac106c3db6c5b066dbb
SHA1

b52398e1654e9a2945eee92355eced71b1d2f89c
SHA256

c2c54fa612e7ed3b3b815b0be01c9341f98141c9ef55aff4fb06c919017bf840
SHA512

a014871a60e858651aee3f09a560bfdfcf8b485b654908d8aec13fbea553c4dbfc49aace806d944aa393670c023caf204a7454a859378dac84319f327c7d6e72
SSDEEP

12288:mUB02Z5hVOg80nTFToCgQcbzdMweKMMi:mH2Cg80hToCgQcPdFbk

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  c2c54fa612e7ed3b3b815b0be01c9341f98141c9ef55aff4fb06c919017bf840
- Size
  
  404KB
- MD5
  
  a73d822489f4eac106c3db6c5b066dbb
- SHA1
  
  b52398e1654e9a2945eee92355eced71b1d2f89c
- SHA256
  
  c2c54fa612e7ed3b3b815b0be01c9341f98141c9ef55aff4fb06c919017bf840
- SHA512
  
  a014871a60e858651aee3f09a560bfdfcf8b485b654908d8aec13fbea553c4dbfc49aace806d944aa393670c023caf204a7454a859378dac84319f327c7d6e72
- SSDEEP
  
  12288:mUB02Z5hVOg80nTFToCgQcbzdMweKMMi:mH2Cg80hToCgQcPdFbk
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2