43afbdcd9626a895a56491f6a65dde70245fe7694f05cea14453b959596c2fc0 | Triage

Sharing

General

Target

57dff9cca71dd665aa33f78f0a0493fa
Size

492KB
Sample

231226-gg5s4acaar
MD5

57dff9cca71dd665aa33f78f0a0493fa
SHA1

06dda101745c3dd9dadda74bbd60f53e5841d4a7
SHA256

43afbdcd9626a895a56491f6a65dde70245fe7694f05cea14453b959596c2fc0
SHA512

d101da53b0b0280cfed69739cbfbb3808537762c86bfa95cb60d44ce2c9ee031d57603aa708dadace34fafdd8f3fbf62a03505b5b77fde24f78e9d9d378d83b0
SSDEEP

12288:rASZb/liI9Fa9Y6/9TX+I2OKgSNmP9jQf:rASZLP9z6VTGKP9jw

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  57dff9cca71dd665aa33f78f0a0493fa
- Size
  
  492KB
- MD5
  
  57dff9cca71dd665aa33f78f0a0493fa
- SHA1
  
  06dda101745c3dd9dadda74bbd60f53e5841d4a7
- SHA256
  
  43afbdcd9626a895a56491f6a65dde70245fe7694f05cea14453b959596c2fc0
- SHA512
  
  d101da53b0b0280cfed69739cbfbb3808537762c86bfa95cb60d44ce2c9ee031d57603aa708dadace34fafdd8f3fbf62a03505b5b77fde24f78e9d9d378d83b0
- SSDEEP
  
  12288:rASZb/liI9Fa9Y6/9TX+I2OKgSNmP9jQf:rASZLP9z6VTGKP9jw
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2