Overview

overview

10

Static

static

a7ee547a9a...4e.exe

windows7-x64

10

a7ee547a9a...4e.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7ee547a9aee2599b10f6e44f0015a6b18751666dbfb280d924cd9ab14a6a54e

  • Size

    122KB

  • Sample

    221124-zyj7tsda8s

  • MD5

    606305f232f9861627be9552fde5bf13

  • SHA1

    18d41f9dde4dcaf5d7c73683a0c604940d8ec086

  • SHA256

    a7ee547a9aee2599b10f6e44f0015a6b18751666dbfb280d924cd9ab14a6a54e

  • SHA512

    f11500755f6941b5c7a710f7e63665b2fddd618da9b46df98bc25932a047c669d8832ac9070683bc3daa34dd0bb21ef8d0c328da343ced208713cbc6ef11c5fd

  • SSDEEP

    3072:aERSHvAEiCSWgYGeTVaMqFr91a+tchcSbpAYp08c:aERGAbb7YGvr9ZMAYuP

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a7ee547a9aee2599b10f6e44f0015a6b18751666dbfb280d924cd9ab14a6a54e

    • Size

      122KB

    • MD5

      606305f232f9861627be9552fde5bf13

    • SHA1

      18d41f9dde4dcaf5d7c73683a0c604940d8ec086

    • SHA256

      a7ee547a9aee2599b10f6e44f0015a6b18751666dbfb280d924cd9ab14a6a54e

    • SHA512

      f11500755f6941b5c7a710f7e63665b2fddd618da9b46df98bc25932a047c669d8832ac9070683bc3daa34dd0bb21ef8d0c328da343ced208713cbc6ef11c5fd

    • SSDEEP

      3072:aERSHvAEiCSWgYGeTVaMqFr91a+tchcSbpAYp08c:aERGAbb7YGvr9ZMAYuP

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks