817418b9b21ae167e47047b460e4368bcdee462e816d341e660ef69289207cb8 | Triage

Sharing

General

Target

55d1102e014ba1cc92b05932d7c238a8
Size

651KB
Sample

240112-h2e9lsbedp
MD5

55d1102e014ba1cc92b05932d7c238a8
SHA1

b0a9eee4725231fc7125660824ffc37964f0dcb6
SHA256

817418b9b21ae167e47047b460e4368bcdee462e816d341e660ef69289207cb8
SHA512

4dd07ff76ba14f69a8ff00930e110bc70ed73242da6ed2b8e056e8b4a26cfb9fc5189cbf6bc9f6bbf5ea7580ee6c7e8c22b2d0fb476317d5e539ccba169e2fc8
SSDEEP

12288:2JoBUgfKBl5MaGrE9RDgcxC8SET7okwWVyfjuKX888888888888W88888888888p:6oBUgu5MaGI9GcHSCok12b5O

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  55d1102e014ba1cc92b05932d7c238a8
- Size
  
  651KB
- MD5
  
  55d1102e014ba1cc92b05932d7c238a8
- SHA1
  
  b0a9eee4725231fc7125660824ffc37964f0dcb6
- SHA256
  
  817418b9b21ae167e47047b460e4368bcdee462e816d341e660ef69289207cb8
- SHA512
  
  4dd07ff76ba14f69a8ff00930e110bc70ed73242da6ed2b8e056e8b4a26cfb9fc5189cbf6bc9f6bbf5ea7580ee6c7e8c22b2d0fb476317d5e539ccba169e2fc8
- SSDEEP
  
  12288:2JoBUgfKBl5MaGrE9RDgcxC8SET7okwWVyfjuKX888888888888W88888888888p:6oBUgu5MaGI9GcHSCok12b5O
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan