c8c4d0b3108c052ff91cb0b0f123a0a20d39b5e82400b898d7881a20e2ce89ec | Triage

Sharing

General

Target

c8c4d0b3108c052ff91cb0b0f123a0a20d39b5e82400b898d7881a20e2ce89ec
Size

110KB
Sample

221206-h9adbseh36
MD5

0fd7e396d721adecd5fe73167eab756b
SHA1

82943926089117f72f506fbe3b89ddc6c1b17c3a
SHA256

c8c4d0b3108c052ff91cb0b0f123a0a20d39b5e82400b898d7881a20e2ce89ec
SHA512

fde2276d105b32a6b80adffe8a9df978cf05c63aa0d6a3cad19dd8d5614d4e10a13e6c42bd79af970ed93e1f87d028cd2c9a58a5441b695a01a970891ea4e3d6
SSDEEP

1536:5egzOy+h60RcB0QgmlEhCy9Ymr32KezyGbW9GdKU/bHhvuBg:b+s6cyQgmltyLq5e99GJbBkg

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  c8c4d0b3108c052ff91cb0b0f123a0a20d39b5e82400b898d7881a20e2ce89ec
- Size
  
  110KB
- MD5
  
  0fd7e396d721adecd5fe73167eab756b
- SHA1
  
  82943926089117f72f506fbe3b89ddc6c1b17c3a
- SHA256
  
  c8c4d0b3108c052ff91cb0b0f123a0a20d39b5e82400b898d7881a20e2ce89ec
- SHA512
  
  fde2276d105b32a6b80adffe8a9df978cf05c63aa0d6a3cad19dd8d5614d4e10a13e6c42bd79af970ed93e1f87d028cd2c9a58a5441b695a01a970891ea4e3d6
- SSDEEP
  
  1536:5egzOy+h60RcB0QgmlEhCy9Ymr32KezyGbW9GdKU/bHhvuBg:b+s6cyQgmltyLq5e99GJbBkg
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2