Overview

overview

10

Static

static

2277d45fc6...99.exe

windows7-x64

10

2277d45fc6...99.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2277d45fc669a04e63eeb39df1bba467c9a7cea83af9c76436902ae487a8e799

  • Size

    307KB

  • Sample

    221106-lgthaadgd5

  • MD5

    1f1f1e5e3fe56fdcb44b1a0ae1b804c0

  • SHA1

    f0f87438450c5160eb1f76f966314f551bf2b1d1

  • SHA256

    2277d45fc669a04e63eeb39df1bba467c9a7cea83af9c76436902ae487a8e799

  • SHA512

    a1a2b4d022699d0a37e1f6260eab37634fef93b51fd0cce890f4c6a25b4ea96543d93c8dfed544974e1f5064164873f81ca44f2b5334cb871732a77bcdc971b3

  • SSDEEP

    6144:DsV2ZRWvvfJ9Po5Lj28rnYytg5zhv/zuP4GDylJh:DsV2PWvvf7PiLj28oVDuPHqv

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2277d45fc669a04e63eeb39df1bba467c9a7cea83af9c76436902ae487a8e799

    • Size

      307KB

    • MD5

      1f1f1e5e3fe56fdcb44b1a0ae1b804c0

    • SHA1

      f0f87438450c5160eb1f76f966314f551bf2b1d1

    • SHA256

      2277d45fc669a04e63eeb39df1bba467c9a7cea83af9c76436902ae487a8e799

    • SHA512

      a1a2b4d022699d0a37e1f6260eab37634fef93b51fd0cce890f4c6a25b4ea96543d93c8dfed544974e1f5064164873f81ca44f2b5334cb871732a77bcdc971b3

    • SSDEEP

      6144:DsV2ZRWvvfJ9Po5Lj28rnYytg5zhv/zuP4GDylJh:DsV2PWvvf7PiLj28oVDuPHqv

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks