93853490c4d51c20d4f91fe2b7a9be2976758d37e0623369e5c91b649ee93b57 | Triage

Sharing

General

Target

Shady Tweakso.bat
Size

395KB
Sample

231114-eb6r4agd3y
MD5

6224e27c7fcef9a3f225b86509d06125
SHA1

7f1e6284acd8d97fbd9475b9c06420404b54df09
SHA256

93853490c4d51c20d4f91fe2b7a9be2976758d37e0623369e5c91b649ee93b57
SHA512

b50d7847f232f1fd33f2ee42966db1ba6b6d8f0a186bd82cf75a40ab5cdd2e6f4aa47d45f6b28a1f1b1fc7d7965817e4d62c6cab54662d6e1f5bc63527f641c4
SSDEEP

3072:0fY8Sp9N6FOL4i89D8oyTzw8gAwcqoApPHU4sdug/x6+dGHl8l+wGHPGHBN0sv5z:0ew8vqPpUd5/yGHBN0sv5Fu05Boy

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  Shady Tweakso.bat
- Size
  
  395KB
- MD5
  
  6224e27c7fcef9a3f225b86509d06125
- SHA1
  
  7f1e6284acd8d97fbd9475b9c06420404b54df09
- SHA256
  
  93853490c4d51c20d4f91fe2b7a9be2976758d37e0623369e5c91b649ee93b57
- SHA512
  
  b50d7847f232f1fd33f2ee42966db1ba6b6d8f0a186bd82cf75a40ab5cdd2e6f4aa47d45f6b28a1f1b1fc7d7965817e4d62c6cab54662d6e1f5bc63527f641c4
- SSDEEP
  
  3072:0fY8Sp9N6FOL4i89D8oyTzw8gAwcqoApPHU4sdug/x6+dGHl8l+wGHPGHBN0sv5z:0ew8vqPpUd5/yGHBN0sv5Fu05Boy
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1