Overview

overview

10

Static

static

b21b32dddc...35.exe

windows7-x64

10

b21b32dddc...35.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b21b32dddc983f44e9cfae1c1d0d46d10a2e531f1c263c07cf47e271213c5235

  • Size

    468KB

  • Sample

    221123-na9xssgc72

  • MD5

    ceeecd3cfc7602c8a5413e34abea5597

  • SHA1

    361d3136cdd2ac6689914cd9c73db13a8ed04c31

  • SHA256

    b21b32dddc983f44e9cfae1c1d0d46d10a2e531f1c263c07cf47e271213c5235

  • SHA512

    5bed615bb090a5926f043ddf8bfa44be7f3b5cc95d623d934ea44a9f8ea38d0057aa0788230d12f6e09ab2070ea7eac1db930fffe522d40a2046c56d5b08a67e

  • SSDEEP

    6144:UHmfpGQEPB9+I5CEidL/0KCrbZ6QFiNM3sI+j/qMgPDIwdohmbZAf/aXAYBjY:UHM7IXi/GfgQFQIUIDIphH/aXAYB

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      b21b32dddc983f44e9cfae1c1d0d46d10a2e531f1c263c07cf47e271213c5235

    • Size

      468KB

    • MD5

      ceeecd3cfc7602c8a5413e34abea5597

    • SHA1

      361d3136cdd2ac6689914cd9c73db13a8ed04c31

    • SHA256

      b21b32dddc983f44e9cfae1c1d0d46d10a2e531f1c263c07cf47e271213c5235

    • SHA512

      5bed615bb090a5926f043ddf8bfa44be7f3b5cc95d623d934ea44a9f8ea38d0057aa0788230d12f6e09ab2070ea7eac1db930fffe522d40a2046c56d5b08a67e

    • SSDEEP

      6144:UHmfpGQEPB9+I5CEidL/0KCrbZ6QFiNM3sI+j/qMgPDIwdohmbZAf/aXAYBjY:UHM7IXi/GfgQFQIUIDIphH/aXAYB

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks