ae74600e6aafd30c5dd08ef8ba6dd0e9e4437173695c67a20ab6920b933109df | Triage

Sharing

General

Target

NEAS.cbe5aea32527f40ca6d46337fd725260.exe
Size

441KB
Sample

231112-2jc63sdf23
MD5

cbe5aea32527f40ca6d46337fd725260
SHA1

fc02623dbb288398ebfd81fb684a074a91086cc4
SHA256

ae74600e6aafd30c5dd08ef8ba6dd0e9e4437173695c67a20ab6920b933109df
SHA512

97a683bed0891384a18ae090437e21331dc0ac671c555682ba3683b5d1650890f672db669baf147d10c9361eeb3a19a1d37229624bcb0d0bb4db076aad52ece4
SSDEEP

6144:nVDW4rhvgSvI2mRDZVQHF7i3ObaLiZQTuIT9JWcuLRsH3y1bh3d3DyNeReF9bFWv:lrmRDc0e3ZQTuITTWRWi1bhEeU9R25

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  NEAS.cbe5aea32527f40ca6d46337fd725260.exe
- Size
  
  441KB
- MD5
  
  cbe5aea32527f40ca6d46337fd725260
- SHA1
  
  fc02623dbb288398ebfd81fb684a074a91086cc4
- SHA256
  
  ae74600e6aafd30c5dd08ef8ba6dd0e9e4437173695c67a20ab6920b933109df
- SHA512
  
  97a683bed0891384a18ae090437e21331dc0ac671c555682ba3683b5d1650890f672db669baf147d10c9361eeb3a19a1d37229624bcb0d0bb4db076aad52ece4
- SSDEEP
  
  6144:nVDW4rhvgSvI2mRDZVQHF7i3ObaLiZQTuIT9JWcuLRsH3y1bh3d3DyNeReF9bFWv:lrmRDc0e3ZQTuITTWRWi1bhEeU9R25
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Stops running service(s)
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Create or Modify System Process

Windows Service

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2