Overview

overview

10

Static

static

688393a340...a7.exe

windows7-x64

10

688393a340...a7.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    688393a340cd757c2dea7d5977f4626b3d954ea50ae38ef131f3198b4fc72ca7

  • Size

    90KB

  • Sample

    221126-cnajbahc6z

  • MD5

    8b254ae8bb33b4f972113108517c6f95

  • SHA1

    6fa7759662ce3d848942c1e92d2ae6d139e78f36

  • SHA256

    688393a340cd757c2dea7d5977f4626b3d954ea50ae38ef131f3198b4fc72ca7

  • SHA512

    5f0549dba2945bc194c0040ff92b09d8a5c58964a4d16e5e0d15289c42de5d875fe58edcdd34f152fdab8db9166b49e888270c50d6a80b1f47bdf0541920130f

  • SSDEEP

    1536:IRM23dNQYM/JYWrkVa9D4NyH4fXy2xnZF+0MsuHD2ert:IN3fQYMxYWEykN//TyL

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      688393a340cd757c2dea7d5977f4626b3d954ea50ae38ef131f3198b4fc72ca7

    • Size

      90KB

    • MD5

      8b254ae8bb33b4f972113108517c6f95

    • SHA1

      6fa7759662ce3d848942c1e92d2ae6d139e78f36

    • SHA256

      688393a340cd757c2dea7d5977f4626b3d954ea50ae38ef131f3198b4fc72ca7

    • SHA512

      5f0549dba2945bc194c0040ff92b09d8a5c58964a4d16e5e0d15289c42de5d875fe58edcdd34f152fdab8db9166b49e888270c50d6a80b1f47bdf0541920130f

    • SSDEEP

      1536:IRM23dNQYM/JYWrkVa9D4NyH4fXy2xnZF+0MsuHD2ert:IN3fQYMxYWEykN//TyL

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks