Overview

overview

10

Static

static

27517e3560...1b.exe

windows7-x64

10

27517e3560...1b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27517e3560cffeae7a965bacc3f3618928243609b2ae5fe524c397ca86f59a1b

  • Size

    468KB

  • Sample

    221123-nbkpasbe5x

  • MD5

    db33c602f6d632fc0f0fb6cdf3b97ecd

  • SHA1

    fde39e76f192116b498dfc1985db87f4e6ca373f

  • SHA256

    27517e3560cffeae7a965bacc3f3618928243609b2ae5fe524c397ca86f59a1b

  • SHA512

    9e4901e47a87eef5de02a057ff58ea4ea73472db26f3cec257059fe3eb1817a7990ed3db65be1a1d22e4b508f70c987e08c0871ea7f63b7875dd4abf2ae51e91

  • SSDEEP

    12288:kHYiU6hkZAHnNWx5ZU2ntbwhw5dLV5hq6HX:k4n6h4AHNajUUshwHLV5063

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      27517e3560cffeae7a965bacc3f3618928243609b2ae5fe524c397ca86f59a1b

    • Size

      468KB

    • MD5

      db33c602f6d632fc0f0fb6cdf3b97ecd

    • SHA1

      fde39e76f192116b498dfc1985db87f4e6ca373f

    • SHA256

      27517e3560cffeae7a965bacc3f3618928243609b2ae5fe524c397ca86f59a1b

    • SHA512

      9e4901e47a87eef5de02a057ff58ea4ea73472db26f3cec257059fe3eb1817a7990ed3db65be1a1d22e4b508f70c987e08c0871ea7f63b7875dd4abf2ae51e91

    • SSDEEP

      12288:kHYiU6hkZAHnNWx5ZU2ntbwhw5dLV5hq6HX:k4n6h4AHNajUUshwHLV5063

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks