0d960148ad80449008bdfd61966f1e08567ef5650357679f20defb9b981469c8 | Triage

Sharing

General

Target

228370e47d35ae67597aae7b766f57fc
Size

344KB
Sample

231231-bema3sdeb2
MD5

228370e47d35ae67597aae7b766f57fc
SHA1

98405dcf9a1f0007552415226a768ef082c9009b
SHA256

0d960148ad80449008bdfd61966f1e08567ef5650357679f20defb9b981469c8
SHA512

a71f0a5e0f80de6f6e1df6778f828818095ae96e9a85edb63dcdf24cf708cf71e78e7eeab1344d2d73b865e336e1d2d4e366e316bd9471cf8886138d8f9a7e32
SSDEEP

6144:GgJ/jEN+PBQSsZQw9o1yhx6GeUIKMRSgsWWnD6/eTwSzHDd:U+PBSZ2ytWYz4SbD

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  228370e47d35ae67597aae7b766f57fc
- Size
  
  344KB
- MD5
  
  228370e47d35ae67597aae7b766f57fc
- SHA1
  
  98405dcf9a1f0007552415226a768ef082c9009b
- SHA256
  
  0d960148ad80449008bdfd61966f1e08567ef5650357679f20defb9b981469c8
- SHA512
  
  a71f0a5e0f80de6f6e1df6778f828818095ae96e9a85edb63dcdf24cf708cf71e78e7eeab1344d2d73b865e336e1d2d4e366e316bd9471cf8886138d8f9a7e32
- SSDEEP
  
  6144:GgJ/jEN+PBQSsZQw9o1yhx6GeUIKMRSgsWWnD6/eTwSzHDd:U+PBSZ2ytWYz4SbD
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2