47e5df70654cbcabc73440e2e29aa962baa66e09cfef1973cd9084c7b5b91b74 | Triage

Sharing

General

Target

3c17072460aa23cf616534a6bd598572
Size

44KB
Sample

231225-zg7a2abaal
MD5

3c17072460aa23cf616534a6bd598572
SHA1

1fe72774a703e1686335064f82c5c95736de3676
SHA256

47e5df70654cbcabc73440e2e29aa962baa66e09cfef1973cd9084c7b5b91b74
SHA512

979a140476a2c2db40f3b6da3c01d4f53790fbf001567fb159ce3b221ca9fa5ad8b7d184cde0f511ddb45be1e485563f38a99d04dd8e92f802b4e4b8de241b8f
SSDEEP

768:S/wzud6HJRgZR8jzcGg1nTGOuSijvCIvM3KOMMMMMMMMMMMMMMMMMMMMMMMMMMMS:86LgZRAoGgBFYeBVFT

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  3c17072460aa23cf616534a6bd598572
- Size
  
  44KB
- MD5
  
  3c17072460aa23cf616534a6bd598572
- SHA1
  
  1fe72774a703e1686335064f82c5c95736de3676
- SHA256
  
  47e5df70654cbcabc73440e2e29aa962baa66e09cfef1973cd9084c7b5b91b74
- SHA512
  
  979a140476a2c2db40f3b6da3c01d4f53790fbf001567fb159ce3b221ca9fa5ad8b7d184cde0f511ddb45be1e485563f38a99d04dd8e92f802b4e4b8de241b8f
- SSDEEP
  
  768:S/wzud6HJRgZR8jzcGg1nTGOuSijvCIvM3KOMMMMMMMMMMMMMMMMMMMMMMMMMMMS:86LgZRAoGgBFYeBVFT
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2