Overview

overview

10

Static

static

9dc62596ec...9a.exe

windows7-x64

10

9dc62596ec...9a.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9dc62596ec0ef91388425b4f9053eaad3ffa405519969b15ecb426babec7779a

  • Size

    116KB

  • Sample

    221127-saa6paaf8y

  • MD5

    e46533b40da1d470aea6b0f2639cc1fb

  • SHA1

    1bc2240881008a19fdfd7430fd3afc5481caa04a

  • SHA256

    9dc62596ec0ef91388425b4f9053eaad3ffa405519969b15ecb426babec7779a

  • SHA512

    739d82090fc840b8437a2a14b8dd94aadd2881a3734c9a74526fb1d8dd1314d994d97bf083edebc783cbe81f0210e27ee8ac526e47fb895b5f6502562e2807ef

  • SSDEEP

    3072:u7Ns4ln2Ceja1RD4XP999W9l9o999zB999999899fE6e6VE6B999W9l9o999zB9T:ANdlbIP999W9l9o999zB999999899M6D

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      9dc62596ec0ef91388425b4f9053eaad3ffa405519969b15ecb426babec7779a

    • Size

      116KB

    • MD5

      e46533b40da1d470aea6b0f2639cc1fb

    • SHA1

      1bc2240881008a19fdfd7430fd3afc5481caa04a

    • SHA256

      9dc62596ec0ef91388425b4f9053eaad3ffa405519969b15ecb426babec7779a

    • SHA512

      739d82090fc840b8437a2a14b8dd94aadd2881a3734c9a74526fb1d8dd1314d994d97bf083edebc783cbe81f0210e27ee8ac526e47fb895b5f6502562e2807ef

    • SSDEEP

      3072:u7Ns4ln2Ceja1RD4XP999W9l9o999zB999999899fE6e6VE6B999W9l9o999zB9T:ANdlbIP999W9l9o999zB999999899M6D

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks