Overview

overview

10

Static

static

ab006550d8...56.exe

windows7-x64

10

ab006550d8...56.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab006550d86ba4174cee95e6b0f7b3dbc2ddf47b96eecd4cacc2e3e17da6f456

  • Size

    45KB

  • Sample

    221123-qpfcvahe3s

  • MD5

    5bc4b63ce78e9649b7a8f313930924ae

  • SHA1

    3012ebd04d470605549502a4627e5a9d39cd9bbd

  • SHA256

    ab006550d86ba4174cee95e6b0f7b3dbc2ddf47b96eecd4cacc2e3e17da6f456

  • SHA512

    af58cd78e38594a798920d417c262d2c3db88196fe7229e22a18797242a9cddc562913db5762f5ca16f2bd662a3b3dd52c77103960505c7ef0090cfb7d13b023

  • SSDEEP

    768:RzxFQxzuXU1brLCnO1V1d4R2LES9MWJ8Z9KJcXlOna2TFCol+:Zwx1rx1jLcXWa2TF/+

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      ab006550d86ba4174cee95e6b0f7b3dbc2ddf47b96eecd4cacc2e3e17da6f456

    • Size

      45KB

    • MD5

      5bc4b63ce78e9649b7a8f313930924ae

    • SHA1

      3012ebd04d470605549502a4627e5a9d39cd9bbd

    • SHA256

      ab006550d86ba4174cee95e6b0f7b3dbc2ddf47b96eecd4cacc2e3e17da6f456

    • SHA512

      af58cd78e38594a798920d417c262d2c3db88196fe7229e22a18797242a9cddc562913db5762f5ca16f2bd662a3b3dd52c77103960505c7ef0090cfb7d13b023

    • SSDEEP

      768:RzxFQxzuXU1brLCnO1V1d4R2LES9MWJ8Z9KJcXlOna2TFCol+:Zwx1rx1jLcXWa2TF/+

    Score
    10/10
    evasionpersistencetrojan

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks