0fbe6b3f5cf9d3393801b666e0020c050544021007cb098a4c1d4ac4d1615239 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

535e06044b42c243a475ac70890c0e0f3eb5a223
Size

408KB
Sample

230110-ctnm5ahf94
MD5

a0a6ac397ec08542a7755cb8d206f3ae
SHA1

535e06044b42c243a475ac70890c0e0f3eb5a223
SHA256

0fbe6b3f5cf9d3393801b666e0020c050544021007cb098a4c1d4ac4d1615239
SHA512

93711d94f6c72c2e12885f3a013cc0d9bb0c0de31199a5bb51b67ef036580d2c6e462ca2d0c3a764646c37aebb4c6faaabfdfff8a28deb929ec26f3505899328
SSDEEP

6144:NIuMZiP895+62p3PdadxO7qfdJl0XGTD18itanG1D8OkCI1mnqGxE4Ed:NhVIn0MxOOVJyX6h8itV19pwmn9xE4I

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  535e06044b42c243a475ac70890c0e0f3eb5a223
- Size
  
  408KB
- MD5
  
  a0a6ac397ec08542a7755cb8d206f3ae
- SHA1
  
  535e06044b42c243a475ac70890c0e0f3eb5a223
- SHA256
  
  0fbe6b3f5cf9d3393801b666e0020c050544021007cb098a4c1d4ac4d1615239
- SHA512
  
  93711d94f6c72c2e12885f3a013cc0d9bb0c0de31199a5bb51b67ef036580d2c6e462ca2d0c3a764646c37aebb4c6faaabfdfff8a28deb929ec26f3505899328
- SSDEEP
  
  6144:NIuMZiP895+62p3PdadxO7qfdJl0XGTD18itanG1D8OkCI1mnqGxE4Ed:NhVIn0MxOOVJyX6h8itV19pwmn9xE4I
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2