Overview

overview

10

Static

static

7b9f63cef3...7b.exe

windows7-x64

10

7b9f63cef3...7b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b9f63cef34082be902909b0342d8b80482013d776b12ab35ebe1a7b760ab97b

  • Size

    412KB

  • Sample

    221128-c3fzmshb54

  • MD5

    fc496b8b614275dc06ebca865ed88cff

  • SHA1

    ba14cebe9993b61c32e1811fd1f3cef3fb39a871

  • SHA256

    7b9f63cef34082be902909b0342d8b80482013d776b12ab35ebe1a7b760ab97b

  • SHA512

    066e0e374e3d6bfb7587b52e013ab15c811a135567dfd04853adc1ad062015a64aae895c31e862ea42f5925ccb0093c995234eb2a8b1bcf0a85bb8e964b9a7de

  • SSDEEP

    12288:wxQICnkjMGy+TbFx7fVTov93Diup65TloAktAnMQ:wxpCq+6h5fCZJc1utOM

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      7b9f63cef34082be902909b0342d8b80482013d776b12ab35ebe1a7b760ab97b

    • Size

      412KB

    • MD5

      fc496b8b614275dc06ebca865ed88cff

    • SHA1

      ba14cebe9993b61c32e1811fd1f3cef3fb39a871

    • SHA256

      7b9f63cef34082be902909b0342d8b80482013d776b12ab35ebe1a7b760ab97b

    • SHA512

      066e0e374e3d6bfb7587b52e013ab15c811a135567dfd04853adc1ad062015a64aae895c31e862ea42f5925ccb0093c995234eb2a8b1bcf0a85bb8e964b9a7de

    • SSDEEP

      12288:wxQICnkjMGy+TbFx7fVTov93Diup65TloAktAnMQ:wxpCq+6h5fCZJc1utOM

    Score
    10/10
    discoveryevasionpersistencetrojan

    • UAC bypass

      evasiontrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks