Overview

overview

10

Static

static

2847452f3d...9a.exe

windows7-x64

10

2847452f3d...9a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2847452f3d0d4dd86b33ba1d29038f518b0c25957881362f5fc314607f37369a

  • Size

    424KB

  • Sample

    221123-nbjf8sbe5v

  • MD5

    6e178fa9d91bb6b560165fae6fad9e37

  • SHA1

    0ed0849f6210030adc3e179aa0d868350481fe0d

  • SHA256

    2847452f3d0d4dd86b33ba1d29038f518b0c25957881362f5fc314607f37369a

  • SHA512

    7ecf207c55641e077d17db090b421e60df3ab4151f7d254ee7d74065b1bc9371415b794d7b6cd590c131f73d2679131b2de2172766d0d122a48133d9832d3412

  • SSDEEP

    6144:zm/P2GDY5aQLh7YHjAxhrzM06T1goACQIX57RUWlFcN3CeVFvht4LZN2dh:WPpat5YHsxhrY06T1ALs7RsQd

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2847452f3d0d4dd86b33ba1d29038f518b0c25957881362f5fc314607f37369a

    • Size

      424KB

    • MD5

      6e178fa9d91bb6b560165fae6fad9e37

    • SHA1

      0ed0849f6210030adc3e179aa0d868350481fe0d

    • SHA256

      2847452f3d0d4dd86b33ba1d29038f518b0c25957881362f5fc314607f37369a

    • SHA512

      7ecf207c55641e077d17db090b421e60df3ab4151f7d254ee7d74065b1bc9371415b794d7b6cd590c131f73d2679131b2de2172766d0d122a48133d9832d3412

    • SSDEEP

      6144:zm/P2GDY5aQLh7YHjAxhrzM06T1goACQIX57RUWlFcN3CeVFvht4LZN2dh:WPpat5YHsxhrY06T1ALs7RsQd

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks