Overview

overview

10

Static

static

072030c2ff...e9.exe

windows7-x64

10

072030c2ff...e9.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    072030c2ff75c1370c9d3684265f4c63e2091a65259652b2d40e08cbdab123e9

  • Size

    408KB

  • Sample

    221125-z7ct4sag9s

  • MD5

    86cca464a9770bd2dca4f49edf86edcd

  • SHA1

    48f12c435f28532a051300e27e08b87db1c4e83c

  • SHA256

    072030c2ff75c1370c9d3684265f4c63e2091a65259652b2d40e08cbdab123e9

  • SHA512

    246ac21b54af03e3963b348a3bedd03a70e0c18440dfcce54bb9e1c802bdbe8bf1561d12730a78c36741d3d1fef390478b324e1f23f5470a6ba5b17f4a83de15

  • SSDEEP

    12288:7hBZibmgN5gOH+tUgswEM/D4xH+aWCzaGTqx:5itN5gcrjwEM/DSe7GT

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      072030c2ff75c1370c9d3684265f4c63e2091a65259652b2d40e08cbdab123e9

    • Size

      408KB

    • MD5

      86cca464a9770bd2dca4f49edf86edcd

    • SHA1

      48f12c435f28532a051300e27e08b87db1c4e83c

    • SHA256

      072030c2ff75c1370c9d3684265f4c63e2091a65259652b2d40e08cbdab123e9

    • SHA512

      246ac21b54af03e3963b348a3bedd03a70e0c18440dfcce54bb9e1c802bdbe8bf1561d12730a78c36741d3d1fef390478b324e1f23f5470a6ba5b17f4a83de15

    • SSDEEP

      12288:7hBZibmgN5gOH+tUgswEM/D4xH+aWCzaGTqx:5itN5gcrjwEM/DSe7GT

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks