Overview

overview

10

Static

static

7de2154a07...20.exe

windows7-x64

10

7de2154a07...20.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7de2154a07e90615b2a4aca6f565878bcca0babed78d2f343cf2662a6810e920

  • Size

    372KB

  • Sample

    221123-lywc7sga4v

  • MD5

    ffdf29637dd1aa8bd9f2ef0e5e1781ca

  • SHA1

    156ce8890f2ade692e4d8436e8b503aa34808fc5

  • SHA256

    7de2154a07e90615b2a4aca6f565878bcca0babed78d2f343cf2662a6810e920

  • SHA512

    1360f88b46fb9c1b5192be8a11329a12b2ac49889aabd41f25456c54850953d1a10782cde10724f7fd10d6c88e414643b7685d5e903da398abbf525df9463914

  • SSDEEP

    6144:VyuuGAXCBlSUNZ5k1b6IRvsAGWDWaDHJb9thxL+NFBoS1wf28kXTiVQdbMj8ABc4:VyuWXC3SsZ5k1b6wjWQpfxKNXJTXTyAS

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      7de2154a07e90615b2a4aca6f565878bcca0babed78d2f343cf2662a6810e920

    • Size

      372KB

    • MD5

      ffdf29637dd1aa8bd9f2ef0e5e1781ca

    • SHA1

      156ce8890f2ade692e4d8436e8b503aa34808fc5

    • SHA256

      7de2154a07e90615b2a4aca6f565878bcca0babed78d2f343cf2662a6810e920

    • SHA512

      1360f88b46fb9c1b5192be8a11329a12b2ac49889aabd41f25456c54850953d1a10782cde10724f7fd10d6c88e414643b7685d5e903da398abbf525df9463914

    • SSDEEP

      6144:VyuuGAXCBlSUNZ5k1b6IRvsAGWDWaDHJb9thxL+NFBoS1wf28kXTiVQdbMj8ABc4:VyuWXC3SsZ5k1b6wjWQpfxKNXJTXTyAS

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks