0bb534fb70ff33eb53525f726dc85d4cb1f8f9cfeea9fc885cfbd46a7d178797 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bb534fb70ff33eb53525f726dc85d4cb1f8f9cfeea9fc885cfbd46a7d178797.exe
Size

135KB
Sample

240708-bdcp9avcqp
MD5

f965a709b28f5fe06fa2d6bc5cd6c398
SHA1

9688616547bcd94401f1769662a0f9f17361a4c8
SHA256

0bb534fb70ff33eb53525f726dc85d4cb1f8f9cfeea9fc885cfbd46a7d178797
SHA512

7902c7411a5bd63e2da3b5518a454f17770af1d426d891e4d8d2a91a43b575ea82ae7d05f40e815086842b4a8938be4467092731abbaa207d08c1fa2396413aa
SSDEEP

3072:Vq6+ouCpk2mpcWJ0r+QNTBfJXMOcYoBp6cb/4DQoyRPYS8G5:Vldk1cWQRNTBx4Y8W2F

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  0bb534fb70ff33eb53525f726dc85d4cb1f8f9cfeea9fc885cfbd46a7d178797.exe
- Size
  
  135KB
- MD5
  
  f965a709b28f5fe06fa2d6bc5cd6c398
- SHA1
  
  9688616547bcd94401f1769662a0f9f17361a4c8
- SHA256
  
  0bb534fb70ff33eb53525f726dc85d4cb1f8f9cfeea9fc885cfbd46a7d178797
- SHA512
  
  7902c7411a5bd63e2da3b5518a454f17770af1d426d891e4d8d2a91a43b575ea82ae7d05f40e815086842b4a8938be4467092731abbaa207d08c1fa2396413aa
- SSDEEP
  
  3072:Vq6+ouCpk2mpcWJ0r+QNTBfJXMOcYoBp6cb/4DQoyRPYS8G5:Vldk1cWQRNTBx4Y8W2F
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Disables Task Manager via registry modification
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2