3a3cdcc3425ed188e475bacf5d3eca3b9653ab2f676367ee25528739ed5f1ce3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c7c368803729999609225fe5f6e8d2a
Size

567KB
Sample

231226-h97ntsbgfn
MD5

5c7c368803729999609225fe5f6e8d2a
SHA1

a537100ab6d772b9ed745b2a296aab691308d7c4
SHA256

3a3cdcc3425ed188e475bacf5d3eca3b9653ab2f676367ee25528739ed5f1ce3
SHA512

b9d9e752710109b2b0856fe32b7c22d72fceb950f40bfcbe7070873f699e1ce5566f6c4b016d41907d232345f812b0db6e827189f1d3fe09214224d15d3ad0f4
SSDEEP

6144:wJV+zthWfbalOX5ZyEWwRnJNGn84AgI8rlzM2YsCkbZRiY1Vmpzlb91mzfr:9hhWaO/51a8VgIwzM2jCkbzP1YPGzD

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5c7c368803729999609225fe5f6e8d2a
- Size
  
  567KB
- MD5
  
  5c7c368803729999609225fe5f6e8d2a
- SHA1
  
  a537100ab6d772b9ed745b2a296aab691308d7c4
- SHA256
  
  3a3cdcc3425ed188e475bacf5d3eca3b9653ab2f676367ee25528739ed5f1ce3
- SHA512
  
  b9d9e752710109b2b0856fe32b7c22d72fceb950f40bfcbe7070873f699e1ce5566f6c4b016d41907d232345f812b0db6e827189f1d3fe09214224d15d3ad0f4
- SSDEEP
  
  6144:wJV+zthWfbalOX5ZyEWwRnJNGn84AgI8rlzM2YsCkbZRiY1Vmpzlb91mzfr:9hhWaO/51a8VgIwzM2jCkbzP1YPGzD
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2