605cbd2c44e0f04716b233626c31907a8a3a451e25a9dc2e6b8939b3ee82f482 | Triage

Sharing

General

Target

605cbd2c44e0f04716b233626c31907a8a3a451e25a9dc2e6b8939b3ee82f482N
Size

860KB
Sample

241101-v1tf3a1qct
MD5

a8a491947c74a7dfb9f00bca59a243e0
SHA1

d951464e7c0ec23617fb35f5ae622850f6a3e5d1
SHA256

605cbd2c44e0f04716b233626c31907a8a3a451e25a9dc2e6b8939b3ee82f482
SHA512

b1c0b2248605b6e2195dac08173af551541dd50bbd86209450c6f2cfad6b7ad87ca3116cf95aadf5834f8d6a67a8caa53c905c1586be1d752b2b840bad2c974d
SSDEEP

24576:2LADaJYo8sYH4LaWhOIPqd5x43NXzofQWMSnmwrAtF19w6AYhqp:2ipTMSnU

Score

8^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  605cbd2c44e0f04716b233626c31907a8a3a451e25a9dc2e6b8939b3ee82f482N
- Size
  
  860KB
- MD5
  
  a8a491947c74a7dfb9f00bca59a243e0
- SHA1
  
  d951464e7c0ec23617fb35f5ae622850f6a3e5d1
- SHA256
  
  605cbd2c44e0f04716b233626c31907a8a3a451e25a9dc2e6b8939b3ee82f482
- SHA512
  
  b1c0b2248605b6e2195dac08173af551541dd50bbd86209450c6f2cfad6b7ad87ca3116cf95aadf5834f8d6a67a8caa53c905c1586be1d752b2b840bad2c974d
- SSDEEP
  
  24576:2LADaJYo8sYH4LaWhOIPqd5x43NXzofQWMSnmwrAtF19w6AYhqp:2ipTMSnU
Score

8^/10

discovery evasion persistence privilege_escalation trojan
- Modifies Windows Firewall
  evasion
- Deletes itself
- Drops startup file
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalation