Overview

overview

8

Static

static

9154d48275...3c.exe

windows7-x64

8

9154d48275...3c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c

  • Size

    415KB

  • Sample

    221203-ybmtrsdd5y

  • MD5

    6ee61a8ea89471e750b1fd1fc898e7b3

  • SHA1

    c7c0e2be23ab5db4f38a5f6d7f2e08b8a80b1ceb

  • SHA256

    9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c

  • SHA512

    5a8f47806c71bbf79e7e7f779f35dc73e1930b42e808a5c877306f3e08cc213eab915f626674dc3e7ac0143adf22c904553703d2714221cb8d4a3df9e7b73d2d

  • SSDEEP

    12288:jJzq2VX1a2TuYGXSod0GTNmR3Aa4WBVvjv+:jJzqiLGXSodZMGWBVC

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c

    • Size

      415KB

    • MD5

      6ee61a8ea89471e750b1fd1fc898e7b3

    • SHA1

      c7c0e2be23ab5db4f38a5f6d7f2e08b8a80b1ceb

    • SHA256

      9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c

    • SHA512

      5a8f47806c71bbf79e7e7f779f35dc73e1930b42e808a5c877306f3e08cc213eab915f626674dc3e7ac0143adf22c904553703d2714221cb8d4a3df9e7b73d2d

    • SSDEEP

      12288:jJzq2VX1a2TuYGXSod0GTNmR3Aa4WBVvjv+:jJzqiLGXSodZMGWBVC

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Adds policy Run key to start application

      persistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Deletes itself

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks