3ad4f2e12ea6e61412f56d3f608922803ba833d02da5448e88add22938de5268 | Triage

Sharing

General

Target

Lifenz Performance Utility.bat
Size

145KB
Sample

240920-vvkxqsybmj
MD5

8e9709af21cba79ad22c00a0e22865f9
SHA1

4a8c962bf655b6e6f2ece1e08560997b615220d6
SHA256

3ad4f2e12ea6e61412f56d3f608922803ba833d02da5448e88add22938de5268
SHA512

913d18aedea6f06c2d3b4e4c496cb9ce35362c3a7c521f29b7a1efe4fe0547a9e72a540f23e5c423f3d521cbe0c4006c51d486bb76fd4c50af365c6770fb0093
SSDEEP

1536:IRucSlFWJQlpTUgIafq+2nSMc8Hc+0maXvrn1lwr+Zi:4aNJCchih

Score

10^/10

evasion execution trojan

Malware Config

Targets

- Target
  
  Lifenz Performance Utility.bat
- Size
  
  145KB
- MD5
  
  8e9709af21cba79ad22c00a0e22865f9
- SHA1
  
  4a8c962bf655b6e6f2ece1e08560997b615220d6
- SHA256
  
  3ad4f2e12ea6e61412f56d3f608922803ba833d02da5448e88add22938de5268
- SHA512
  
  913d18aedea6f06c2d3b4e4c496cb9ce35362c3a7c521f29b7a1efe4fe0547a9e72a540f23e5c423f3d521cbe0c4006c51d486bb76fd4c50af365c6770fb0093
- SSDEEP
  
  1536:IRucSlFWJQlpTUgIafq+2nSMc8Hc+0maXvrn1lwr+Zi:4aNJCchih
Score

10^/10

execution evasion trojan
- UAC bypass
  evasion trojan
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionexecutiontrojan