0b0007d3d86d94fec16fbeb98d2759c9ee18fcc06b0135c88eb878105b64e35e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b68dde9ba8f3cdb4491c9007a76b730N
Size

716KB
Sample

240913-v6x2fazdrc
MD5

0b68dde9ba8f3cdb4491c9007a76b730
SHA1

7a25cdbf0095a9ec904ae72ab4cd8b7b0583670b
SHA256

0b0007d3d86d94fec16fbeb98d2759c9ee18fcc06b0135c88eb878105b64e35e
SHA512

526dd1defcd3e167fbe04ee7e4761f48e68c6f5421df5fb444013e68a03a42fefc9c38928c89811181cfe6c3d5bfcf0ae7ede56acca3eb587aa1243a6aa27211
SSDEEP

12288:aiVlz1L1evrcvrlUmd3SfLwJImElPL31kPoc:ai3z1hlD+mqLJmEYo

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  0b68dde9ba8f3cdb4491c9007a76b730N
- Size
  
  716KB
- MD5
  
  0b68dde9ba8f3cdb4491c9007a76b730
- SHA1
  
  7a25cdbf0095a9ec904ae72ab4cd8b7b0583670b
- SHA256
  
  0b0007d3d86d94fec16fbeb98d2759c9ee18fcc06b0135c88eb878105b64e35e
- SHA512
  
  526dd1defcd3e167fbe04ee7e4761f48e68c6f5421df5fb444013e68a03a42fefc9c38928c89811181cfe6c3d5bfcf0ae7ede56acca3eb587aa1243a6aa27211
- SSDEEP
  
  12288:aiVlz1L1evrcvrlUmd3SfLwJImElPL31kPoc:ai3z1hlD+mqLJmEYo
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2