e165a351878f6abd194aa525e0ab35c9d99c4c296d484de942eb359ae19689d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ba3be7eedcb84500ac1132d159f7960
Size

344KB
Sample

231225-adv16agfhm
MD5

1ba3be7eedcb84500ac1132d159f7960
SHA1

c36c792d5ae56811de3edb0d48f0d8530cdf8894
SHA256

e165a351878f6abd194aa525e0ab35c9d99c4c296d484de942eb359ae19689d2
SHA512

8a2c6e504ae76dfa838de370ad9a4d76ff9fd18b5ff651b0d751e08cf44453d69472c0a3072b7a8f9f89d0dccc53f7f97925640ddd016831d176fde0faccb85f
SSDEEP

6144:rSQa0ZVcn2T/l6lMJ2iZVL56bJd2hG8RpZMCt4rbjaJLJIJ5d:rXa0ZWn270la2e5cmh/iCmfjaIJ

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  1ba3be7eedcb84500ac1132d159f7960
- Size
  
  344KB
- MD5
  
  1ba3be7eedcb84500ac1132d159f7960
- SHA1
  
  c36c792d5ae56811de3edb0d48f0d8530cdf8894
- SHA256
  
  e165a351878f6abd194aa525e0ab35c9d99c4c296d484de942eb359ae19689d2
- SHA512
  
  8a2c6e504ae76dfa838de370ad9a4d76ff9fd18b5ff651b0d751e08cf44453d69472c0a3072b7a8f9f89d0dccc53f7f97925640ddd016831d176fde0faccb85f
- SSDEEP
  
  6144:rSQa0ZVcn2T/l6lMJ2iZVL56bJd2hG8RpZMCt4rbjaJLJIJ5d:rXa0ZWn270la2e5cmh/iCmfjaIJ
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2