Overview

overview

10

Static

static

d819d48255...29.exe

windows7-x64

10

d819d48255...29.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29

  • Size

    125KB

  • Sample

    221123-s8ayksdc64

  • MD5

    3ddfd0617485214bb7652f7a4dc3ebdc

  • SHA1

    a9d463354066834960d2581e5b89e5825e5a7ae7

  • SHA256

    d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29

  • SHA512

    89e4532eb3daea741e86e50530d57293f19e53b619d03e0a262a44bfc112320f48a6ee0dd7abe6d50712a1eb410d64ec11168fb32e9b6b76f3ecb4601cb3259f

  • SSDEEP

    3072:udUo5nWTkStvJ+prtliH4+EvokIg80JxpiEt0gZ:+WTorlwMvoIDegZ

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29

    • Size

      125KB

    • MD5

      3ddfd0617485214bb7652f7a4dc3ebdc

    • SHA1

      a9d463354066834960d2581e5b89e5825e5a7ae7

    • SHA256

      d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29

    • SHA512

      89e4532eb3daea741e86e50530d57293f19e53b619d03e0a262a44bfc112320f48a6ee0dd7abe6d50712a1eb410d64ec11168fb32e9b6b76f3ecb4601cb3259f

    • SSDEEP

      3072:udUo5nWTkStvJ+prtliH4+EvokIg80JxpiEt0gZ:+WTorlwMvoIDegZ

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks