Overview

overview

10

Static

static

40878b1445...be.exe

windows7-x64

10

40878b1445...be.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40878b144546065514592985935d431728501af9783a406ec55102427ebe8bbe

  • Size

    492KB

  • Sample

    221123-nbhjyabe5t

  • MD5

    5ecd652d795dc01c250a16af4728bdf4

  • SHA1

    fce96372d5f79a59a9b3163f51b417f708225140

  • SHA256

    40878b144546065514592985935d431728501af9783a406ec55102427ebe8bbe

  • SHA512

    09e25ca192ac3a114d6741ce3c3f1c55c9325ea18727492e79615945a21b8e0ef8ca9761101603cafcd77d25b5fc2db0b31a252aab696b6e08af64a6dedc9bfb

  • SSDEEP

    6144:PNc0p9tqViYN5CmV9Cd11lhR/+Dle/SwR00/evXW+rJN/JyyefTNCRC67QtVwg:CCWpDxVql+D6SwqfrtNJDaCk67QtV

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      40878b144546065514592985935d431728501af9783a406ec55102427ebe8bbe

    • Size

      492KB

    • MD5

      5ecd652d795dc01c250a16af4728bdf4

    • SHA1

      fce96372d5f79a59a9b3163f51b417f708225140

    • SHA256

      40878b144546065514592985935d431728501af9783a406ec55102427ebe8bbe

    • SHA512

      09e25ca192ac3a114d6741ce3c3f1c55c9325ea18727492e79615945a21b8e0ef8ca9761101603cafcd77d25b5fc2db0b31a252aab696b6e08af64a6dedc9bfb

    • SSDEEP

      6144:PNc0p9tqViYN5CmV9Cd11lhR/+Dle/SwR00/evXW+rJN/JyyefTNCRC67QtVwg:CCWpDxVql+D6SwqfrtNJDaCk67QtV

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks