Overview

overview

10

Static

static

3e7f04285f...19.exe

windows7-x64

10

3e7f04285f...19.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e7f04285fc95769071c526a872a4e3b0589d4e159997b001b3ee0c8f46ccf19

  • Size

    392KB

  • Sample

    221011-tdmjkacfb7

  • MD5

    2a31a9f9f9b1a8e9403efc70b6b40807

  • SHA1

    66b978b7d3ef3ea67ec415f3398fd3ed902f533a

  • SHA256

    3e7f04285fc95769071c526a872a4e3b0589d4e159997b001b3ee0c8f46ccf19

  • SHA512

    62afcf48ddfadbfb81906759e74c9df0b65de469b19d5b835b0b6c6a9ef32ed76181fd230af937a93e00e138f543d9bf595c3fe5d88fc4a12bc6233dda900ad5

  • SSDEEP

    12288:fRskdtDMgmQTsVxNaOmGcG0VkX0jLLmH0X:fRskdt6QAVLaOmIImH0

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      3e7f04285fc95769071c526a872a4e3b0589d4e159997b001b3ee0c8f46ccf19

    • Size

      392KB

    • MD5

      2a31a9f9f9b1a8e9403efc70b6b40807

    • SHA1

      66b978b7d3ef3ea67ec415f3398fd3ed902f533a

    • SHA256

      3e7f04285fc95769071c526a872a4e3b0589d4e159997b001b3ee0c8f46ccf19

    • SHA512

      62afcf48ddfadbfb81906759e74c9df0b65de469b19d5b835b0b6c6a9ef32ed76181fd230af937a93e00e138f543d9bf595c3fe5d88fc4a12bc6233dda900ad5

    • SSDEEP

      12288:fRskdtDMgmQTsVxNaOmGcG0VkX0jLLmH0X:fRskdt6QAVLaOmIImH0

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks