ed01c99063740a0d4c0aca74f5d6520f39436c02721f8506a25e5f68ccfc6896 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed01c99063740a0d4c0aca74f5d6520f39436c02721f8506a25e5f68ccfc6896
Size

383KB
Sample

241012-enjhbswhrq
MD5

308146d731b2c5e6ef7f0f282951e962
SHA1

88cd9372823de70eefb6f4ddcc879d6298d6d74d
SHA256

ed01c99063740a0d4c0aca74f5d6520f39436c02721f8506a25e5f68ccfc6896
SHA512

81a5a89d1d5d2619e6392a38c7cbcf6fa35cef9734bb534098831340b272d995fe4e28be6b5a0f57c7741a55f1968fc1fd2f0fcd54a6d7f7cf30aebfc49df107
SSDEEP

6144:QDm0gD2JZVaG7XsYAZxKSezrjU27kaO8/3l91efCoVdaErfbn/+o2wfkUKLeRlhK:QkKfVaG7cYS4Hk2/V91efCotb/+zwfkW

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  ed01c99063740a0d4c0aca74f5d6520f39436c02721f8506a25e5f68ccfc6896
- Size
  
  383KB
- MD5
  
  308146d731b2c5e6ef7f0f282951e962
- SHA1
  
  88cd9372823de70eefb6f4ddcc879d6298d6d74d
- SHA256
  
  ed01c99063740a0d4c0aca74f5d6520f39436c02721f8506a25e5f68ccfc6896
- SHA512
  
  81a5a89d1d5d2619e6392a38c7cbcf6fa35cef9734bb534098831340b272d995fe4e28be6b5a0f57c7741a55f1968fc1fd2f0fcd54a6d7f7cf30aebfc49df107
- SSDEEP
  
  6144:QDm0gD2JZVaG7XsYAZxKSezrjU27kaO8/3l91efCoVdaErfbn/+o2wfkUKLeRlhK:QkKfVaG7cYS4Hk2/V91efCotb/+zwfkW
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2