Overview

overview

10

Static

static

6b3da853d7...b8.exe

windows7-x64

10

6b3da853d7...b8.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8

  • Size

    199KB

  • Sample

    221201-ejnaqafg8x

  • MD5

    8cb62a156971ce47e5240a25932faa45

  • SHA1

    29519ab6377f6dda653f5a06b57d0bef90e71163

  • SHA256

    6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8

  • SHA512

    deb05bd443cb5665d8b4588af86521d0835be6b3e79730e69a910ad1868e79b8eaafb0746d637a0dfade0b7fe996ad84171af00aa9c29bd3c5dd50ec5433a6d7

  • SSDEEP

    3072:mk+Hn2oM3TUULfoAGrLGBgNGGoJKG7ERRbuemXhJGTr5cxXgj2:OnhM3BoHpoGoJKzRg1EcxQq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8

    • Size

      199KB

    • MD5

      8cb62a156971ce47e5240a25932faa45

    • SHA1

      29519ab6377f6dda653f5a06b57d0bef90e71163

    • SHA256

      6b3da853d71971e0d25af90c0c4f9615e645db2f547a023e4e77dd1d551b78b8

    • SHA512

      deb05bd443cb5665d8b4588af86521d0835be6b3e79730e69a910ad1868e79b8eaafb0746d637a0dfade0b7fe996ad84171af00aa9c29bd3c5dd50ec5433a6d7

    • SSDEEP

      3072:mk+Hn2oM3TUULfoAGrLGBgNGGoJKG7ERRbuemXhJGTr5cxXgj2:OnhM3BoHpoGoJKzRg1EcxQq

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks