Overview

overview

10

Static

static

2c99b21ac3...99.exe

windows7-x64

10

2c99b21ac3...99.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c99b21ac358d344b2b748da9131014827ae8e49f9abe8e1e83942d2456c4699

  • Size

    391KB

  • Sample

    221125-j111csch25

  • MD5

    13661d14e20599210367de8f7f864eba

  • SHA1

    23b71f72696e4ee7fcabe75b925b660c2ffe920b

  • SHA256

    2c99b21ac358d344b2b748da9131014827ae8e49f9abe8e1e83942d2456c4699

  • SHA512

    d51874a457e24ba5de3edf63f227d6d538241674930dc193b14fe3949585b8b7082b759e1ce70aaf98202f846392803d2f0019837c45bf98560a763539118df9

  • SSDEEP

    6144:1tS6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2ifFvlt:EdGppg0zj7Y8Sz96jdbsucLJ5Fj

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2c99b21ac358d344b2b748da9131014827ae8e49f9abe8e1e83942d2456c4699

    • Size

      391KB

    • MD5

      13661d14e20599210367de8f7f864eba

    • SHA1

      23b71f72696e4ee7fcabe75b925b660c2ffe920b

    • SHA256

      2c99b21ac358d344b2b748da9131014827ae8e49f9abe8e1e83942d2456c4699

    • SHA512

      d51874a457e24ba5de3edf63f227d6d538241674930dc193b14fe3949585b8b7082b759e1ce70aaf98202f846392803d2f0019837c45bf98560a763539118df9

    • SSDEEP

      6144:1tS6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2ifFvlt:EdGppg0zj7Y8Sz96jdbsucLJ5Fj

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks