28c0acdb4802add547be567598804823073f989255dc968de71bdacc0d1d150c | Triage

Sharing

General

Target

5c6cc73e9b5aef5653a092fedefddb1d
Size

456KB
Sample

231226-h9f6wabfgn
MD5

5c6cc73e9b5aef5653a092fedefddb1d
SHA1

56df75e7110b373d0028bb334b90e982ac6fedab
SHA256

28c0acdb4802add547be567598804823073f989255dc968de71bdacc0d1d150c
SHA512

f32f1cec0d81a32039391cf1fdddf595823f57e9cfa49f3d107786781bc61e5ed2d2fd90279d09cae3a294650f37dabfedb5226b145ca846d1eebab024c075ad
SSDEEP

12288:2gR3CljNnEF/Rc3vWDsRMOxRj0GIn226Em7FdrFj2:fR3Cx+i3vWDGTxFTEmjrFj2

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5c6cc73e9b5aef5653a092fedefddb1d
- Size
  
  456KB
- MD5
  
  5c6cc73e9b5aef5653a092fedefddb1d
- SHA1
  
  56df75e7110b373d0028bb334b90e982ac6fedab
- SHA256
  
  28c0acdb4802add547be567598804823073f989255dc968de71bdacc0d1d150c
- SHA512
  
  f32f1cec0d81a32039391cf1fdddf595823f57e9cfa49f3d107786781bc61e5ed2d2fd90279d09cae3a294650f37dabfedb5226b145ca846d1eebab024c075ad
- SSDEEP
  
  12288:2gR3CljNnEF/Rc3vWDsRMOxRj0GIn226Em7FdrFj2:fR3Cx+i3vWDGTxFTEmjrFj2
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2