diamondfox | 7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f | Triage™

Login
Reports

Overview

overview

Static

static

7a1833f7b9...5f.exe

windows7-x64

7a1833f7b9...5f.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f
Size 18KB
Sample221026-2d36bahedp
SHA256 7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f
MD5 8f77d92060389f5733905710714556ce
SHA1 f817bbd59241f5dd732259784c2fabff78d1dfde
SHA512 313e5b16ac7d556a74d19b2610f5e811694c1a660a460604afe5272f416fb1f7f2d04cea173dc9f2ce392e42101225fa0850f03ceaf46616d52347c96097468a
SSDEEP 384:NJE1O9JBp+U2CYf00mrtWivKSmSggQmUWgVhkXHQ1:NFI0/XvdJUVhgH
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

diamondfox botnet evasion persistence stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f.exe

Resource

win7-20220812-en

windows7-x64

14 signatures

600 seconds

diamondfox botnet evasion persistence stealer trojan

Behavioral task

behavioral2

Sample

7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

12 signatures

600 seconds

diamondfox botnet evasion persistence stealer trojan

Malware Config

Targets

- Target
  7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f
- Size 18KB
- SHA256 7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f
- MD5 8f77d92060389f5733905710714556ce
- SHA1 f817bbd59241f5dd732259784c2fabff78d1dfde
- SHA512 313e5b16ac7d556a74d19b2610f5e811694c1a660a460604afe5272f416fb1f7f2d04cea173dc9f2ce392e42101225fa0850f03ceaf46616d52347c96097468a
- SSDEEP 384:NJE1O9JBp+U2CYf00mrtWivKSmSggQmUWgVhkXHQ1:NFI0/XvdJUVhgH
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

diamondfox botnet evasion persistence stealer trojan
- DiamondFox
  DiamondFox is a multipurpose botnet with many capabilities.
  botnet stealer diamondfox
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Deletes itself
- Drops startup file
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

diamondfoxbotnetevasionpersistencestealertrojan

behavioral2

diamondfoxbotnetevasionpersistencestealertrojan

© 2018-2026

Terms | Privacy