03c36553bfc3a89501e6e37c6f993a51e4e1345f278024fc00da9b998501190f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lisect_AV-T_G3_305.exe
Size

550KB
Sample

240422-jfbvqsha9x
MD5

9efc4f84e9e3e533c633f7e766423234
SHA1

75b4321c938ed7613c712e805848940772e3a2d7
SHA256

03c36553bfc3a89501e6e37c6f993a51e4e1345f278024fc00da9b998501190f
SHA512

f7ccb34dfd9bb7cbe80f7dc8680847c7701302632a253ff043db7f491868eb7b648ec853a19f2b12caf979a990ff2df863496ae2e1ffb42d1baeb013ee524dae
SSDEEP

12288:9t2srLN4gZpSEgHXvr83c6FdjdbqA8XmIM0qeKm7PH:9tZrLNrZpS3v+djdbAXVjKg/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  Lisect_AV-T_G3_305.exe
- Size
  
  550KB
- MD5
  
  9efc4f84e9e3e533c633f7e766423234
- SHA1
  
  75b4321c938ed7613c712e805848940772e3a2d7
- SHA256
  
  03c36553bfc3a89501e6e37c6f993a51e4e1345f278024fc00da9b998501190f
- SHA512
  
  f7ccb34dfd9bb7cbe80f7dc8680847c7701302632a253ff043db7f491868eb7b648ec853a19f2b12caf979a990ff2df863496ae2e1ffb42d1baeb013ee524dae
- SSDEEP
  
  12288:9t2srLN4gZpSEgHXvr83c6FdjdbqA8XmIM0qeKm7PH:9tZrLNrZpS3v+djdbAXVjKg/
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2