Overview

overview

10

Static

static

9f0050bd6d...54.exe

windows7-x64

8

9f0050bd6d...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f0050bd6d614cf3ba6dbba4bd736c6d5c7ac6a92ec78630220c637deaf23354

  • Size

    329KB

  • Sample

    221029-vejdzafgep

  • MD5

    a3c2d8cd151a785402bf80856d5c5630

  • SHA1

    3b52e5964dd10f28317f65a37a9fd1828ac3412b

  • SHA256

    9f0050bd6d614cf3ba6dbba4bd736c6d5c7ac6a92ec78630220c637deaf23354

  • SHA512

    108897c6be31f53af9d2a6f699d6b72bc0c6a1cf94b1763a0daa9e378ee59cfd434efe3090cca9f1b3e6df9479089511c29517775d55756bee0f1f4f15f0532e

  • SSDEEP

    3072:++rcMzILk1UOD86VZ8eqbjqcPNRZv1RLv74FNsr+0:++Q6VsZD1RfF+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9f0050bd6d614cf3ba6dbba4bd736c6d5c7ac6a92ec78630220c637deaf23354

    • Size

      329KB

    • MD5

      a3c2d8cd151a785402bf80856d5c5630

    • SHA1

      3b52e5964dd10f28317f65a37a9fd1828ac3412b

    • SHA256

      9f0050bd6d614cf3ba6dbba4bd736c6d5c7ac6a92ec78630220c637deaf23354

    • SHA512

      108897c6be31f53af9d2a6f699d6b72bc0c6a1cf94b1763a0daa9e378ee59cfd434efe3090cca9f1b3e6df9479089511c29517775d55756bee0f1f4f15f0532e

    • SSDEEP

      3072:++rcMzILk1UOD86VZ8eqbjqcPNRZv1RLv74FNsr+0:++Q6VsZD1RfF+

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks