Overview

overview

10

Static

static

c8393bc28c...9b.exe

windows7-x64

10

c8393bc28c...9b.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b

  • Size

    420KB

  • Sample

    221201-rscxkagb89

  • MD5

    bfe545e624cd8adaa45774ce6c2f4fe3

  • SHA1

    336f72fe4388db08994c72ba3b138183083aef9b

  • SHA256

    c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b

  • SHA512

    63a9e8330ff33bd50e6c45c3349a23ce06175be293496c90b35502408b745a827c7bee5e522b100e2bafba609f410e5762177c3c72b11f4062e1ceb48802ba3e

  • SSDEEP

    6144:/JZIwU+M0FbGs9+tVXDv62Wuk3af5ZclCp2Uxp4xvsQNP2CyLVk4q:/Jg+3Fau2WuUS5+4n4WQNP2L5

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b

    • Size

      420KB

    • MD5

      bfe545e624cd8adaa45774ce6c2f4fe3

    • SHA1

      336f72fe4388db08994c72ba3b138183083aef9b

    • SHA256

      c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b

    • SHA512

      63a9e8330ff33bd50e6c45c3349a23ce06175be293496c90b35502408b745a827c7bee5e522b100e2bafba609f410e5762177c3c72b11f4062e1ceb48802ba3e

    • SSDEEP

      6144:/JZIwU+M0FbGs9+tVXDv62Wuk3af5ZclCp2Uxp4xvsQNP2CyLVk4q:/Jg+3Fau2WuUS5+4n4WQNP2L5

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks