7d70da6d8dc46ab237d8ddba048c4dce0660003d460b423adb14c783e145ce76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

568f429ae648197bc42e616f49b397ce
Size

382KB
Sample

240112-qg66lahdb8
MD5

568f429ae648197bc42e616f49b397ce
SHA1

7612e198cb81777013336398903f40736d80704a
SHA256

7d70da6d8dc46ab237d8ddba048c4dce0660003d460b423adb14c783e145ce76
SHA512

1b7fae7fc728173a48e9786781dc37248598e77824626c43c473a29584a443c815588739e0b7301a22191ae3c5fb27c05f44aab98bbb18c8ea6b95eac98ec80b
SSDEEP

6144:HjZRMYnI8mJ+ehSemWfSZSzuhgrE9dYCb8xf4I7GVltNyEe6EofQKKfnGIYt3yKN:HtRMYnI8mJlmWp6hgricAQG3Xxai5

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  568f429ae648197bc42e616f49b397ce
- Size
  
  382KB
- MD5
  
  568f429ae648197bc42e616f49b397ce
- SHA1
  
  7612e198cb81777013336398903f40736d80704a
- SHA256
  
  7d70da6d8dc46ab237d8ddba048c4dce0660003d460b423adb14c783e145ce76
- SHA512
  
  1b7fae7fc728173a48e9786781dc37248598e77824626c43c473a29584a443c815588739e0b7301a22191ae3c5fb27c05f44aab98bbb18c8ea6b95eac98ec80b
- SSDEEP
  
  6144:HjZRMYnI8mJ+ehSemWfSZSzuhgrE9dYCb8xf4I7GVltNyEe6EofQKKfnGIYt3yKN:HtRMYnI8mJlmWp6hgricAQG3Xxai5
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2