Overview

overview

10

Static

static

e29fb7788f...a8.exe

windows7-x64

10

e29fb7788f...a8.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e29fb7788fc78c55586c6c51cff32dc4a96f9ae4a8cc7bd3f2efdb20fccac5a8

  • Size

    392KB

  • Sample

    221202-z3c93shg6y

  • MD5

    e8940efa3d8db0ae9afa0e39103cef0f

  • SHA1

    5234aee71933b7374af3f55da8d87aafc6adb1b2

  • SHA256

    e29fb7788fc78c55586c6c51cff32dc4a96f9ae4a8cc7bd3f2efdb20fccac5a8

  • SHA512

    767464f1be641734affa5b2fd0aced80c57b8c99d02a84d612fd74946134e58c97b1d6055ad7bb768352e3928796c6d049fd8bb4f35f3e6a331e9e981278fccc

  • SSDEEP

    12288:Cd5sTH4JGqud/+GyVod/A0RIhKcGicLoh:Cd5SSBGyVITRIhKz1Ly

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      e29fb7788fc78c55586c6c51cff32dc4a96f9ae4a8cc7bd3f2efdb20fccac5a8

    • Size

      392KB

    • MD5

      e8940efa3d8db0ae9afa0e39103cef0f

    • SHA1

      5234aee71933b7374af3f55da8d87aafc6adb1b2

    • SHA256

      e29fb7788fc78c55586c6c51cff32dc4a96f9ae4a8cc7bd3f2efdb20fccac5a8

    • SHA512

      767464f1be641734affa5b2fd0aced80c57b8c99d02a84d612fd74946134e58c97b1d6055ad7bb768352e3928796c6d049fd8bb4f35f3e6a331e9e981278fccc

    • SSDEEP

      12288:Cd5sTH4JGqud/+GyVod/A0RIhKcGicLoh:Cd5SSBGyVITRIhKz1Ly

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks