Overview

overview

10

Static

static

cd6b60380c...4f.exe

windows7-x64

10

cd6b60380c...4f.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cd6b60380c269ceb14806a9ef65d3b49a10aea71d3876447e0bbbc51a364124f

  • Size

    364KB

  • Sample

    221203-f1r6nsca8w

  • MD5

    90b98fbfcd4f511a53c04782fcb45e35

  • SHA1

    e40b51651750a3a8e7064467d954ef95887dc20b

  • SHA256

    cd6b60380c269ceb14806a9ef65d3b49a10aea71d3876447e0bbbc51a364124f

  • SHA512

    94d0c8dcda28c3e5d471d26f51f43661724ca393eccfa7cab3930f0b7386857ea111fb26b572035b198d275ff0a839d58a62e5dda91134b16f74fedcc43af0b9

  • SSDEEP

    6144:hMZByXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:hecMFOkbV5f0H2DeJxZaZPJ+

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      cd6b60380c269ceb14806a9ef65d3b49a10aea71d3876447e0bbbc51a364124f

    • Size

      364KB

    • MD5

      90b98fbfcd4f511a53c04782fcb45e35

    • SHA1

      e40b51651750a3a8e7064467d954ef95887dc20b

    • SHA256

      cd6b60380c269ceb14806a9ef65d3b49a10aea71d3876447e0bbbc51a364124f

    • SHA512

      94d0c8dcda28c3e5d471d26f51f43661724ca393eccfa7cab3930f0b7386857ea111fb26b572035b198d275ff0a839d58a62e5dda91134b16f74fedcc43af0b9

    • SSDEEP

      6144:hMZByXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:hecMFOkbV5f0H2DeJxZaZPJ+

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks