Overview

overview

10

Static

static

a6550b6c2e...6b.exe

windows7-x64

10

a6550b6c2e...6b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6550b6c2eb7767c145f8f013a2d9486dab8ceb5fc31703195e2586d3fd0486b

  • Size

    158KB

  • Sample

    221123-qq2bpshf3v

  • MD5

    1d9e8b1774f1a1876db3367528d01189

  • SHA1

    78c08d438380875969f30a01e849f60ce217788a

  • SHA256

    a6550b6c2eb7767c145f8f013a2d9486dab8ceb5fc31703195e2586d3fd0486b

  • SHA512

    47ada6a165d0d70c7cc8fad5c9d67f552617a2900dc849f8d515adef47348c9c9aeaed1edc217808e41589bd84e8cd6365711d8a2e79addcbb695d83059d68e7

  • SSDEEP

    3072:ESl6EaT2Tip/qJ3sP/gsVlpgyaMGdwj4y2ICbo+:EGGVHgywIOo+

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a6550b6c2eb7767c145f8f013a2d9486dab8ceb5fc31703195e2586d3fd0486b

    • Size

      158KB

    • MD5

      1d9e8b1774f1a1876db3367528d01189

    • SHA1

      78c08d438380875969f30a01e849f60ce217788a

    • SHA256

      a6550b6c2eb7767c145f8f013a2d9486dab8ceb5fc31703195e2586d3fd0486b

    • SHA512

      47ada6a165d0d70c7cc8fad5c9d67f552617a2900dc849f8d515adef47348c9c9aeaed1edc217808e41589bd84e8cd6365711d8a2e79addcbb695d83059d68e7

    • SSDEEP

      3072:ESl6EaT2Tip/qJ3sP/gsVlpgyaMGdwj4y2ICbo+:EGGVHgywIOo+

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks