e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2
Size

418KB
Sample

221207-egpqrsfd4v
MD5

22482523de8761bc84f675f4c50d9a60
SHA1

ca54cd61d5d82998c669fc8dcb0a504cdcb8a6ba
SHA256

e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2
SHA512

3336053d3584aa13395097cc6b4d69203a92ca2798048ebf6360ea780b17e783c59167aa2d5cae01c34141c6b4399088d96d142a69515203cb842d1bcbf7d8ca
SSDEEP

12288:wN/5Y9FOd5xWNChIzB0yUiQDTrT1IV+tHv49Rk:o2FOlRa6yU9TbtHy

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2
- Size
  
  418KB
- MD5
  
  22482523de8761bc84f675f4c50d9a60
- SHA1
  
  ca54cd61d5d82998c669fc8dcb0a504cdcb8a6ba
- SHA256
  
  e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2
- SHA512
  
  3336053d3584aa13395097cc6b4d69203a92ca2798048ebf6360ea780b17e783c59167aa2d5cae01c34141c6b4399088d96d142a69515203cb842d1bcbf7d8ca
- SSDEEP
  
  12288:wN/5Y9FOd5xWNChIzB0yUiQDTrT1IV+tHv49Rk:o2FOlRa6yU9TbtHy
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2