f4353a70459f5ffe4462430509893a499e9aa017d6c1c6e32c73481b3c6c4850 | Triage

Sharing

General

Target

f4353a70459f5ffe4462430509893a499e9aa017d6c1c6e32c73481b3c6c4850
Size

564KB
Sample

221206-tqg5lsga61
MD5

59e3d76dd0156b6edee49e6d8ca7e693
SHA1

36543187009fa916112bd95485ffa999effe90ae
SHA256

f4353a70459f5ffe4462430509893a499e9aa017d6c1c6e32c73481b3c6c4850
SHA512

99cc4b8d6c251d05abce4bb3535baf6fbd713e175e40fb1bababc1e3c9476c77400cf08c3ebd299b4d127339c1014f85b6286afeef6e25f63385ac9f08fc0a6e
SSDEEP

12288:sHGdluWTMn/dkIUZ+a0EtDGmsdaQFQG93qFZ6S5lnGLtxxvTV5nr:qGdcWTMn/dkILYtDGms4Yf38D5lnGLJb

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  f4353a70459f5ffe4462430509893a499e9aa017d6c1c6e32c73481b3c6c4850
- Size
  
  564KB
- MD5
  
  59e3d76dd0156b6edee49e6d8ca7e693
- SHA1
  
  36543187009fa916112bd95485ffa999effe90ae
- SHA256
  
  f4353a70459f5ffe4462430509893a499e9aa017d6c1c6e32c73481b3c6c4850
- SHA512
  
  99cc4b8d6c251d05abce4bb3535baf6fbd713e175e40fb1bababc1e3c9476c77400cf08c3ebd299b4d127339c1014f85b6286afeef6e25f63385ac9f08fc0a6e
- SSDEEP
  
  12288:sHGdluWTMn/dkIUZ+a0EtDGmsdaQFQG93qFZ6S5lnGLtxxvTV5nr:qGdcWTMn/dkILYtDGms4Yf38D5lnGLJb
Score

10^/10

evasion trojan
- Modifies firewall policy service
  evasion
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2