1758eaa9e34349f61a9f1176fb24dc9b59eccf98cf9899c45d572e6adb1b4069 | Triage

Sharing

General

Target

1758eaa9e34349f61a9f1176fb24dc9b59eccf98cf9899c45d572e6adb1b4069N
Size

416KB
Sample

241009-lpcvhavhrk
MD5

18f7318597e8a5587c34112044126280
SHA1

c4850ea5517d2ac5fe62b5b4e2d62871e2e92c68
SHA256

1758eaa9e34349f61a9f1176fb24dc9b59eccf98cf9899c45d572e6adb1b4069
SHA512

cc7a4b7b96542332ce3769447afedb27e5e56d46eb812a743aa1b5c480c15c572320881c75882170693567f580b9700f7da272ecd21a02b2e986f8cf0624ee29
SSDEEP

6144:vtq9OCvAI0Y/qMjUlofaeExV3a+e5qb8wAp5Ey+W0HXQGkJrx0Ph4orLCR5yMkIG:FivNiMDpExIpGrQnVxBoSh6DR0APt+Y

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  1758eaa9e34349f61a9f1176fb24dc9b59eccf98cf9899c45d572e6adb1b4069N
- Size
  
  416KB
- MD5
  
  18f7318597e8a5587c34112044126280
- SHA1
  
  c4850ea5517d2ac5fe62b5b4e2d62871e2e92c68
- SHA256
  
  1758eaa9e34349f61a9f1176fb24dc9b59eccf98cf9899c45d572e6adb1b4069
- SHA512
  
  cc7a4b7b96542332ce3769447afedb27e5e56d46eb812a743aa1b5c480c15c572320881c75882170693567f580b9700f7da272ecd21a02b2e986f8cf0624ee29
- SSDEEP
  
  6144:vtq9OCvAI0Y/qMjUlofaeExV3a+e5qb8wAp5Ey+W0HXQGkJrx0Ph4orLCR5yMkIG:FivNiMDpExIpGrQnVxBoSh6DR0APt+Y
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2