fbb2bd240480bb95058a522c0144b6704691bed1fd932f1978c3283d03aea882 | Triage

Sharing

General

Target

chthonic_2.23.11.2.vir
Size

300KB
Sample

200719-84z75jspaa
MD5

65960d4d59689ca0985d938f6896161a
SHA1

5e5adededfa5a1401c4bc42bd639a33f29d74766
SHA256

fbb2bd240480bb95058a522c0144b6704691bed1fd932f1978c3283d03aea882
SHA512

2bd773d37c46653dc71a176ed2b4c551c3dc6471beb99122ac3a92371c8fcdf24a242d5a154a4be9c05c5e4166a19024f025664525232fcb05cbfce576047f4d

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  chthonic_2.23.11.2.vir
- Size
  
  300KB
- MD5
  
  65960d4d59689ca0985d938f6896161a
- SHA1
  
  5e5adededfa5a1401c4bc42bd639a33f29d74766
- SHA256
  
  fbb2bd240480bb95058a522c0144b6704691bed1fd932f1978c3283d03aea882
- SHA512
  
  2bd773d37c46653dc71a176ed2b4c551c3dc6471beb99122ac3a92371c8fcdf24a242d5a154a4be9c05c5e4166a19024f025664525232fcb05cbfce576047f4d
Score

10^/10

evasion trojan persistence
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- UAC bypass
  evasion trojan
- Adds policy Run key to start application
  persistence
- Disables taskbar notifications via registry modification
  evasion
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Modify Registry

Disabling Security Tools

Bypass User Account Control

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasiontrojanpersistence

behavioral2

persistenceevasiontrojan