8d280ff753bd36445c6e54cc151f158682c28043f3d86816ac160b1ab68ab4df | Triage

Sharing

General

Target

4f356d087e7ff70f3fcc09e84cd5f01b9798abc6
Size

393KB
Sample

230110-cfvvaacf4v
MD5

8014ab2815b82cddba4c250ed0455947
SHA1

4f356d087e7ff70f3fcc09e84cd5f01b9798abc6
SHA256

8d280ff753bd36445c6e54cc151f158682c28043f3d86816ac160b1ab68ab4df
SHA512

1e19096e7b112682930f72f3b3f0235b5e5e331aff8092a5b00701d567dc90652212d5d2d04f4cef2be9b2d16ea23a85b83e2d1531802c690a7659910dcb9025
SSDEEP

6144:Aieq3xg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjMY:Tecg7dUmmLen1G6Lkjr7plWzuDRsVqZO

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4f356d087e7ff70f3fcc09e84cd5f01b9798abc6
- Size
  
  393KB
- MD5
  
  8014ab2815b82cddba4c250ed0455947
- SHA1
  
  4f356d087e7ff70f3fcc09e84cd5f01b9798abc6
- SHA256
  
  8d280ff753bd36445c6e54cc151f158682c28043f3d86816ac160b1ab68ab4df
- SHA512
  
  1e19096e7b112682930f72f3b3f0235b5e5e331aff8092a5b00701d567dc90652212d5d2d04f4cef2be9b2d16ea23a85b83e2d1531802c690a7659910dcb9025
- SSDEEP
  
  6144:Aieq3xg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjMY:Tecg7dUmmLen1G6Lkjr7plWzuDRsVqZO
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2