Overview

overview

10

Static

static

ebd187987d...ca.exe

windows7-x64

10

ebd187987d...ca.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebd187987d3d0b922fba1741bd96312798ef1888816a325766747866ca8d15ca

  • Size

    206KB

  • Sample

    221002-n2zadadhc3

  • MD5

    635a5aad75a562b40d9cd3e23f61bc77

  • SHA1

    07718f751fc0fac84d01849f25ff38ea1403d1f9

  • SHA256

    ebd187987d3d0b922fba1741bd96312798ef1888816a325766747866ca8d15ca

  • SHA512

    73fb6e3672839a73c79ea3f962f224b3598d476165343bff594dafcf1e8cb2705ddfd2190a66970f38f317b26897cd25ac98f0def07993ec5e5319f8df40074b

  • SSDEEP

    3072:JUdas6F7Oq4W+qWFG/zY//HlIwFlbThSAFP2jfhld03iuRXCpSvFWBMuQVxtt3ZP:xp0GZenU+2jfdkiuBvvF1l5Fg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ebd187987d3d0b922fba1741bd96312798ef1888816a325766747866ca8d15ca

    • Size

      206KB

    • MD5

      635a5aad75a562b40d9cd3e23f61bc77

    • SHA1

      07718f751fc0fac84d01849f25ff38ea1403d1f9

    • SHA256

      ebd187987d3d0b922fba1741bd96312798ef1888816a325766747866ca8d15ca

    • SHA512

      73fb6e3672839a73c79ea3f962f224b3598d476165343bff594dafcf1e8cb2705ddfd2190a66970f38f317b26897cd25ac98f0def07993ec5e5319f8df40074b

    • SSDEEP

      3072:JUdas6F7Oq4W+qWFG/zY//HlIwFlbThSAFP2jfhld03iuRXCpSvFWBMuQVxtt3ZP:xp0GZenU+2jfdkiuBvvF1l5Fg

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks