5bbbbc13fe20082dc0b426b7021e1b6c6dd7325937be57c93d6a5bb26fef6d15 | Triage

Sharing

General

Target

153acf8eff9daa042830f7c0ae7a3e3b
Size

451KB
Sample

231225-ltyb1abec7
MD5

153acf8eff9daa042830f7c0ae7a3e3b
SHA1

5f5c9d1c635d2cd99d8e53478e6c9d940842bf0a
SHA256

5bbbbc13fe20082dc0b426b7021e1b6c6dd7325937be57c93d6a5bb26fef6d15
SHA512

29f5d919ff0f48d3781d47ef971b56bbced843adb4f295293b9385376095a42912aa08969a0b1e1a69a3facbc220d968248920250e66e3f00f043277275834d0
SSDEEP

12288:gT5jKwdk//psFei2YAb2gtCHGNE2Qy1/yjzdqBbHCE7:65j+XpsFj2YmomNv4qbiE7

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  153acf8eff9daa042830f7c0ae7a3e3b
- Size
  
  451KB
- MD5
  
  153acf8eff9daa042830f7c0ae7a3e3b
- SHA1
  
  5f5c9d1c635d2cd99d8e53478e6c9d940842bf0a
- SHA256
  
  5bbbbc13fe20082dc0b426b7021e1b6c6dd7325937be57c93d6a5bb26fef6d15
- SHA512
  
  29f5d919ff0f48d3781d47ef971b56bbced843adb4f295293b9385376095a42912aa08969a0b1e1a69a3facbc220d968248920250e66e3f00f043277275834d0
- SSDEEP
  
  12288:gT5jKwdk//psFei2YAb2gtCHGNE2Qy1/yjzdqBbHCE7:65j+XpsFj2YmomNv4qbiE7
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2