8fe64fe0f0ecd088a38d30ad7f24dd1efe7b8e82321f4001cbbb4a1edf945c7e | Triage

Sharing

General

Target

3a61b9526a97aca591ad76dc7faa597c
Size

368KB
Sample

231231-s99tascbc9
MD5

3a61b9526a97aca591ad76dc7faa597c
SHA1

b456f47b2613e24eb3c3f5f10f4a5d1038875354
SHA256

8fe64fe0f0ecd088a38d30ad7f24dd1efe7b8e82321f4001cbbb4a1edf945c7e
SHA512

bd1ed050685407cda7a6c83741895a77b4b4b99a9403d4c6eee6eb300dd045248f98d69124c1fdf3bc84bf6481ab35d9497bbda5ec1e2d114ed81b6265d66d1c
SSDEEP

6144:UCmzRM4hrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:UCmzRMOrpDneFNzino7IUHybPzQjUeX

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  3a61b9526a97aca591ad76dc7faa597c
- Size
  
  368KB
- MD5
  
  3a61b9526a97aca591ad76dc7faa597c
- SHA1
  
  b456f47b2613e24eb3c3f5f10f4a5d1038875354
- SHA256
  
  8fe64fe0f0ecd088a38d30ad7f24dd1efe7b8e82321f4001cbbb4a1edf945c7e
- SHA512
  
  bd1ed050685407cda7a6c83741895a77b4b4b99a9403d4c6eee6eb300dd045248f98d69124c1fdf3bc84bf6481ab35d9497bbda5ec1e2d114ed81b6265d66d1c
- SSDEEP
  
  6144:UCmzRM4hrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:UCmzRMOrpDneFNzino7IUHybPzQjUeX
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2