72eae37517eaed332bc583a116070f191452f38f8ad4dc5d04f79632b4e119c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ƁĕӊίᾓďƳỡטּ.exe
Size

90KB
Sample

240326-yx89wsbb88
MD5

b070e830a6863a4c19a4f86b7d67ccff
SHA1

fb5e98a9beffb68d2d2a3a3a4ed523830e1f8718
SHA256

72eae37517eaed332bc583a116070f191452f38f8ad4dc5d04f79632b4e119c5
SHA512

af990dc6da9512b58ff68d346eb283c9b5cac528c496ca110afcd07eaef266ac9a586677046045319a953c77e4964ec24d90a4fbe32304a925f3aa56899a78f6
SSDEEP

1536:z7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfixQBgO:vq6+ouCpk2mpcWJ0r+QNTBfivO

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  ƁĕӊίᾓďƳỡטּ.exe
- Size
  
  90KB
- MD5
  
  b070e830a6863a4c19a4f86b7d67ccff
- SHA1
  
  fb5e98a9beffb68d2d2a3a3a4ed523830e1f8718
- SHA256
  
  72eae37517eaed332bc583a116070f191452f38f8ad4dc5d04f79632b4e119c5
- SHA512
  
  af990dc6da9512b58ff68d346eb283c9b5cac528c496ca110afcd07eaef266ac9a586677046045319a953c77e4964ec24d90a4fbe32304a925f3aa56899a78f6
- SSDEEP
  
  1536:z7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfixQBgO:vq6+ouCpk2mpcWJ0r+QNTBfivO
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Create or Modify System Process

Windows Service

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1