Overview

overview

10

Static

static

481afc8a9f...56.exe

windows7-x64

10

481afc8a9f...56.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    481afc8a9f4f662af3ff2aa62f399d7a3d302d273e58f5c980211a262c063356

  • Size

    320KB

  • Sample

    221123-rrk7jshc97

  • MD5

    7a2bb419762ae4ab999ddb128db84753

  • SHA1

    ae0b11b95fb8794168356ace916d49dd5cfd41f1

  • SHA256

    481afc8a9f4f662af3ff2aa62f399d7a3d302d273e58f5c980211a262c063356

  • SHA512

    5e788e2ae9f74db0afd1e36f7cbcc8f6c568fdb0d91c19af042653e57c2d945276e65ddec14ade5f9a1013047367fdc78ae707940d7b97463059f6be39e3f914

  • SSDEEP

    3072:VnjFDKCI1OZ/5/PAu3iZ8BoyJOQSDPNw2FWQC6:Vnj1KCrNiBDmsWc

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      481afc8a9f4f662af3ff2aa62f399d7a3d302d273e58f5c980211a262c063356

    • Size

      320KB

    • MD5

      7a2bb419762ae4ab999ddb128db84753

    • SHA1

      ae0b11b95fb8794168356ace916d49dd5cfd41f1

    • SHA256

      481afc8a9f4f662af3ff2aa62f399d7a3d302d273e58f5c980211a262c063356

    • SHA512

      5e788e2ae9f74db0afd1e36f7cbcc8f6c568fdb0d91c19af042653e57c2d945276e65ddec14ade5f9a1013047367fdc78ae707940d7b97463059f6be39e3f914

    • SSDEEP

      3072:VnjFDKCI1OZ/5/PAu3iZ8BoyJOQSDPNw2FWQC6:Vnj1KCrNiBDmsWc

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks