539beafc9303883726193437beb5fabb724b493a426999a306934fea6e13b114 | Triage

Sharing

General

Target

04037e2774459dfb9f0e4d57e1be631d
Size

786KB
Sample

231224-s2hpvagfh5
MD5

04037e2774459dfb9f0e4d57e1be631d
SHA1

8dc82a354d8e8c4232f6b3e2a023e9d06dd8adf3
SHA256

539beafc9303883726193437beb5fabb724b493a426999a306934fea6e13b114
SHA512

21b233a118cd34aea40cc9652a62201dcf020a5ed444e510735101ffaf422d8106c1b280448f62aa40f369686af8e26cbbe6d3ffdd820acc92abccc75759ab0c
SSDEEP

24576:qM4ixgytVbgS4iwKXESy+1pEABjASOn/qd2:br3gSkXe1LBjFOnCU

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  Comprovante.com
- Size
  
  1.5MB
- MD5
  
  d1571b10f40bc472691bbc7a6a31b3b6
- SHA1
  
  e099052e23eb4bbce14b8b519902457d39683c1e
- SHA256
  
  cf8e592ba09785bd4021f851a49b3e507a9944dd26117f57b3a0fb90700a7600
- SHA512
  
  30379c184a988c09750505d1bfa746f64609fce4a4f730c78fe7c595fe2b2200b9571216ed94099b1da4856bbb220729c466a78629efddda8029451869166436
- SSDEEP
  
  24576:CKQ9l27WMnm1LiUgt3BwBkSDBnEV4ujDCMy0WW1HGLxNU:AJMgeSVEVfeMymwv
Score

10^/10

evasion trojan
- Modifies visibility of file extensions in Explorer
  evasion
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Drops startup file
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2