dd83e44c2bb561b5db3a24982736fda401ba90bbd3a197ccef3386a6693ba0b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c1d798111de3388da13e3f4bc1c7154
Size

82KB
Sample

231225-hds6kagcg9
MD5

0c1d798111de3388da13e3f4bc1c7154
SHA1

2af90d0233308552f803063ef30d39c2febbde41
SHA256

dd83e44c2bb561b5db3a24982736fda401ba90bbd3a197ccef3386a6693ba0b6
SHA512

db01d6265d511f9e153fe6e7da3b5230f50fa9fb7eb31a1661d123cbc03da8d287269d929fa7530629b55096d7973fe30c6a4e9237534086d25266170e6f090f
SSDEEP

1536:VQQ2aTmzPfYPZrk5SORqgBATkL+Z2AQsw9sV:VQQ2aS7udiXqgBo++Z2Uw9sV

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0c1d798111de3388da13e3f4bc1c7154
- Size
  
  82KB
- MD5
  
  0c1d798111de3388da13e3f4bc1c7154
- SHA1
  
  2af90d0233308552f803063ef30d39c2febbde41
- SHA256
  
  dd83e44c2bb561b5db3a24982736fda401ba90bbd3a197ccef3386a6693ba0b6
- SHA512
  
  db01d6265d511f9e153fe6e7da3b5230f50fa9fb7eb31a1661d123cbc03da8d287269d929fa7530629b55096d7973fe30c6a4e9237534086d25266170e6f090f
- SSDEEP
  
  1536:VQQ2aTmzPfYPZrk5SORqgBATkL+Z2AQsw9sV:VQQ2aS7udiXqgBo++Z2Uw9sV
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Stops running service(s)
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan