Overview

overview

10

Static

static

f3a3ae8365...40.exe

windows7-x64

10

f3a3ae8365...40.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740

  • Size

    396KB

  • Sample

    221123-pxvxtsfe8z

  • MD5

    ea41c5db457c9ffc1b5b9123221566dc

  • SHA1

    0ef072528ffb999640e3bff8c7f85001f2ca960a

  • SHA256

    f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740

  • SHA512

    70012d25e6bc2d5fff590a07c1395feb391c082d0d9ddab0b59d63a30c57c460601e9029c0511bd56fde10e7d69b5c54b8aaac1455206efd3a8da9674797d46e

  • SSDEEP

    6144:eTlJp5MaZRlT24+X7EkxwpS7a953X47wi1UlaawbMIBi95LH4Iiei:Qvp5ZN+XjxsAwi1PZtBT

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740

    • Size

      396KB

    • MD5

      ea41c5db457c9ffc1b5b9123221566dc

    • SHA1

      0ef072528ffb999640e3bff8c7f85001f2ca960a

    • SHA256

      f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740

    • SHA512

      70012d25e6bc2d5fff590a07c1395feb391c082d0d9ddab0b59d63a30c57c460601e9029c0511bd56fde10e7d69b5c54b8aaac1455206efd3a8da9674797d46e

    • SSDEEP

      6144:eTlJp5MaZRlT24+X7EkxwpS7a953X47wi1UlaawbMIBi95LH4Iiei:Qvp5ZN+XjxsAwi1PZtBT

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks