Overview

overview

10

Static

static

72032c0944...6a.exe

windows7-x64

10

72032c0944...6a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72032c0944e64001436874b24f888cb59be564263282aa277e1d075c8c85286a

  • Size

    468KB

  • Sample

    221127-t29n1abh68

  • MD5

    79f3f1924d8cee2351c2755611e5c951

  • SHA1

    3a2fa09e6d14d07c31a40ad7a2108056a8e46924

  • SHA256

    72032c0944e64001436874b24f888cb59be564263282aa277e1d075c8c85286a

  • SHA512

    195c885ce332b4258b37bf27a795174fa4e88a913734e297e3d0f81b1e0cf28e1292914c82e30bf8aa54958f6827c1d9c7c77a3f03db8e153fa742f39adb179b

  • SSDEEP

    6144:xHmfpGQEPB9+I5CEidL/0KCrbZ6QFiNM3sI+j/qMgPDIwdohmbZAf/aXAYBX:xHM7IXi/GfgQFQIUIDIphH/aXAYB

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      72032c0944e64001436874b24f888cb59be564263282aa277e1d075c8c85286a

    • Size

      468KB

    • MD5

      79f3f1924d8cee2351c2755611e5c951

    • SHA1

      3a2fa09e6d14d07c31a40ad7a2108056a8e46924

    • SHA256

      72032c0944e64001436874b24f888cb59be564263282aa277e1d075c8c85286a

    • SHA512

      195c885ce332b4258b37bf27a795174fa4e88a913734e297e3d0f81b1e0cf28e1292914c82e30bf8aa54958f6827c1d9c7c77a3f03db8e153fa742f39adb179b

    • SSDEEP

      6144:xHmfpGQEPB9+I5CEidL/0KCrbZ6QFiNM3sI+j/qMgPDIwdohmbZAf/aXAYBX:xHM7IXi/GfgQFQIUIDIphH/aXAYB

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks