14c87644c759f663c02774c31adb0e8ea00c557dd659c5693fe6563b75dea250

Analysis

max time kernel
1s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
27-03-2023 12:07

Target

540003093308be1893002f0a75e73be010488151d91e36d4a19b8260557e68f1.exe
Size

203KB
MD5

702681c442d61dc4a9719bd3e377dc17
SHA1

7d191d6a62e3abdd7d45d5d50fcce0abd421ea9e
SHA256

540003093308be1893002f0a75e73be010488151d91e36d4a19b8260557e68f1
SHA512

2dc0ccf469987567cf4f962cf82d412c16e61a4b9e9ca12f62d8a08897db6cbe39fab4c6f839ff19ec1a5676e52b452f444fee2f6f403856fd1ce3ec73205123
SSDEEP

6144:sLV6Bta6dtJmakIM53n/kAflqT1une7R0s1e2:sLV6Btpmkc/FU5e2

Score

6^/10

evasion trojan

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

Processes:

540003093308be1893002f0a75e73be010488151d91e36d4a19b8260557e68f1.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	540003093308be1893002f0a75e73be010488151d91e36d4a19b8260557e68f1.exe

C:\Users\Admin\AppData\Local\Temp\540003093308be1893002f0a75e73be010488151d91e36d4a19b8260557e68f1.exe
"C:\Users\Admin\AppData\Local\Temp\540003093308be1893002f0a75e73be010488151d91e36d4a19b8260557e68f1.exe"
1⤵
- Checks whether UAC is enabled
PID:1948

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact