38d32fb14dfa820d4109d4ddeba8a95d971e7382a7a42229331a18da2e4eaac1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6
Size

393KB
Sample

230110-cwn2nshg85
MD5

a1430abaeeb9fdeb78bd7973428ff85c
SHA1

85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6
SHA256

38d32fb14dfa820d4109d4ddeba8a95d971e7382a7a42229331a18da2e4eaac1
SHA512

00034d1537c5f38faaacf000d0545de828c9e0bbbb94ccac34480dd7b473e297f29c4717c98d212401b26fe697028d68e4fd9e6d95f785b925ede35abade9c81
SSDEEP

6144:U5j+7bo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnjNqEu:UA7bQnhxUUSbuGFehOsuC8XmklbB/u

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6
- Size
  
  393KB
- MD5
  
  a1430abaeeb9fdeb78bd7973428ff85c
- SHA1
  
  85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6
- SHA256
  
  38d32fb14dfa820d4109d4ddeba8a95d971e7382a7a42229331a18da2e4eaac1
- SHA512
  
  00034d1537c5f38faaacf000d0545de828c9e0bbbb94ccac34480dd7b473e297f29c4717c98d212401b26fe697028d68e4fd9e6d95f785b925ede35abade9c81
- SSDEEP
  
  6144:U5j+7bo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnjNqEu:UA7bQnhxUUSbuGFehOsuC8XmklbB/u
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2