Overview

overview

10

Static

static

5ef4a5005f...71.exe

windows7-x64

10

5ef4a5005f...71.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ef4a5005f27a3b182f7428cf034839ef91da6d99f787f9b80ee87e767293471

  • Size

    392KB

  • Sample

    220918-3m252sbbbn

  • MD5

    3d9b726d2654cfa0132c9aecab7d5c24

  • SHA1

    5c08b08c64c70198ee24ec3018962419fdbd9dbd

  • SHA256

    5ef4a5005f27a3b182f7428cf034839ef91da6d99f787f9b80ee87e767293471

  • SHA512

    aea6a3c79bb893f0e900ac83de27eb437ed35330d235717171ff8a8031e48ff40d451067eea3ab75966113bb2dc61577f06501aa23a6e64bcfe396003b0f522f

  • SSDEEP

    6144:HVzeUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dia6zF:TCJibvNYJbxYYgbRke6DIa6zV0y

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5ef4a5005f27a3b182f7428cf034839ef91da6d99f787f9b80ee87e767293471

    • Size

      392KB

    • MD5

      3d9b726d2654cfa0132c9aecab7d5c24

    • SHA1

      5c08b08c64c70198ee24ec3018962419fdbd9dbd

    • SHA256

      5ef4a5005f27a3b182f7428cf034839ef91da6d99f787f9b80ee87e767293471

    • SHA512

      aea6a3c79bb893f0e900ac83de27eb437ed35330d235717171ff8a8031e48ff40d451067eea3ab75966113bb2dc61577f06501aa23a6e64bcfe396003b0f522f

    • SSDEEP

      6144:HVzeUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dia6zF:TCJibvNYJbxYYgbRke6DIa6zV0y

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks