Overview

overview

10

Static

static

11e28f0a18...28.exe

windows7-x64

10

11e28f0a18...28.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11e28f0a1833a6bfbf78e2d07897c6e772460595a47f808b684bb50a5b7b7928

  • Size

    198KB

  • Sample

    221125-ffcv9aff2s

  • MD5

    6d6c4b9310c8a3b2b67be02e8da4fb35

  • SHA1

    9b8ea53f6da2bf7164e54824b24b0acd119f4304

  • SHA256

    11e28f0a1833a6bfbf78e2d07897c6e772460595a47f808b684bb50a5b7b7928

  • SHA512

    dec497de73534256da9c93ebfe3533859c94f3f0c0c79cbcefd8c68ba95a66606afbb39bbe242ce4176e5b3997a7d109f07ae1e71413ecdb15e51e153bbe393d

  • SSDEEP

    6144:sa1nF7pHFQzKFDHOBYsx28r/LtWbtMyzX05sKk3:sCFLl9uZr/pWZxYmKq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      11e28f0a1833a6bfbf78e2d07897c6e772460595a47f808b684bb50a5b7b7928

    • Size

      198KB

    • MD5

      6d6c4b9310c8a3b2b67be02e8da4fb35

    • SHA1

      9b8ea53f6da2bf7164e54824b24b0acd119f4304

    • SHA256

      11e28f0a1833a6bfbf78e2d07897c6e772460595a47f808b684bb50a5b7b7928

    • SHA512

      dec497de73534256da9c93ebfe3533859c94f3f0c0c79cbcefd8c68ba95a66606afbb39bbe242ce4176e5b3997a7d109f07ae1e71413ecdb15e51e153bbe393d

    • SSDEEP

      6144:sa1nF7pHFQzKFDHOBYsx28r/LtWbtMyzX05sKk3:sCFLl9uZr/pWZxYmKq

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks