a5a01e1bf5e54e9c85f1224cd55a29542f33c292462741a6bc1c149d08ebc6d8 | Triage

Sharing

General

Target

a5a01e1bf5e54e9c85f1224cd55a29542f33c292462741a6bc1c149d08ebc6d8
Size

195KB
Sample

221206-r8wplsbe31
MD5

6a751e879cb89caa0d93034c70439cbd
SHA1

3df7c39f9c2ee157ff15ee51b5fbd0b9890e9aa2
SHA256

a5a01e1bf5e54e9c85f1224cd55a29542f33c292462741a6bc1c149d08ebc6d8
SHA512

c7644ee6404fc5f25e3ed3e39afa52b8cfb7a128bed0075416a239d87f4011b01c25fc3aad251ff01198db0aa5ad80d4a9e363fc459899ec8d0cca9d16571bd8
SSDEEP

6144:8pxfqUJivY+vFs043l6dTP87wI9vpxfqe:SxiUJUaaZ07Vxie

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  a5a01e1bf5e54e9c85f1224cd55a29542f33c292462741a6bc1c149d08ebc6d8
- Size
  
  195KB
- MD5
  
  6a751e879cb89caa0d93034c70439cbd
- SHA1
  
  3df7c39f9c2ee157ff15ee51b5fbd0b9890e9aa2
- SHA256
  
  a5a01e1bf5e54e9c85f1224cd55a29542f33c292462741a6bc1c149d08ebc6d8
- SHA512
  
  c7644ee6404fc5f25e3ed3e39afa52b8cfb7a128bed0075416a239d87f4011b01c25fc3aad251ff01198db0aa5ad80d4a9e363fc459899ec8d0cca9d16571bd8
- SSDEEP
  
  6144:8pxfqUJivY+vFs043l6dTP87wI9vpxfqe:SxiUJUaaZ07Vxie
Score

10^/10

evasion trojan
- Modifies firewall policy service
  evasion
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2