Overview

overview

10

Static

static

d2160d6a99...97.exe

windows7-x64

10

d2160d6a99...97.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097

  • Size

    326KB

  • Sample

    221123-lyd4xsfh9z

  • MD5

    74779653709c86041df8dc5949aa5e16

  • SHA1

    a3583f462b089dae65b480072ac7863dc2ad4b1a

  • SHA256

    d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097

  • SHA512

    7f0814cd448b2d31818afdb75127916a2299a3413e40418d5ac680ec77dbdcb0b752cdc30098a91a3eaf05f650ac7ac1dc57db3e3348bed278cea3a05cb4368c

  • SSDEEP

    6144:YqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:SO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097

    • Size

      326KB

    • MD5

      74779653709c86041df8dc5949aa5e16

    • SHA1

      a3583f462b089dae65b480072ac7863dc2ad4b1a

    • SHA256

      d2160d6a9943edbaf95894824f452bd1bc24d51a2e8798b9f52926e140d00097

    • SHA512

      7f0814cd448b2d31818afdb75127916a2299a3413e40418d5ac680ec77dbdcb0b752cdc30098a91a3eaf05f650ac7ac1dc57db3e3348bed278cea3a05cb4368c

    • SSDEEP

      6144:YqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:SO1xm+QoK0t4K3gCTDYWGrYzt+NST

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks