54bd6a3728e83ee30d5e9702f8fd0a8de59ab87c15deb997a0466f620abc9967 | Triage

Sharing

General

Target

1281a885d606bf84ee9d1aae7665951b
Size

396KB
Sample

231230-jltyhadcfm
MD5

1281a885d606bf84ee9d1aae7665951b
SHA1

9959b796fda2706a33e243ed3041938a1c44c3d6
SHA256

54bd6a3728e83ee30d5e9702f8fd0a8de59ab87c15deb997a0466f620abc9967
SHA512

33aea162ab888e7ef8bd5f058be131265b5ba1ea45c37ce913840d00a8b5d73fac8c17f4092798beb78cb096490c962ca0e6b8db1d79fd6d7008d9af18a16850
SSDEEP

12288:6brK1ZM4HrOsev8d8G8/XP9MnEeY5NRO:wrKLM4L8G8/FMnJYM

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1281a885d606bf84ee9d1aae7665951b
- Size
  
  396KB
- MD5
  
  1281a885d606bf84ee9d1aae7665951b
- SHA1
  
  9959b796fda2706a33e243ed3041938a1c44c3d6
- SHA256
  
  54bd6a3728e83ee30d5e9702f8fd0a8de59ab87c15deb997a0466f620abc9967
- SHA512
  
  33aea162ab888e7ef8bd5f058be131265b5ba1ea45c37ce913840d00a8b5d73fac8c17f4092798beb78cb096490c962ca0e6b8db1d79fd6d7008d9af18a16850
- SSDEEP
  
  12288:6brK1ZM4HrOsev8d8G8/XP9MnEeY5NRO:wrKLM4L8G8/FMnJYM
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2