Overview

overview

10

Static

static

9a9d9f70e5...6f.exe

windows7-x64

10

9a9d9f70e5...6f.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a9d9f70e5fbbe435cdff96e7443d3437bed1822cc0ffb9d8fdf629ea358ad6f

  • Size

    328KB

  • Sample

    221205-nhxx7shg5x

  • MD5

    992fdcdc8ba2d4e79f7f323eb2789393

  • SHA1

    2109e9c54d7b3fc869a9039c9c4a602bceb398c4

  • SHA256

    9a9d9f70e5fbbe435cdff96e7443d3437bed1822cc0ffb9d8fdf629ea358ad6f

  • SHA512

    38c7dccaf59cab526c1f88c50cd1819b2e3a3eec53e12c4bab466abbd1e6cdb46baddf65b9f9f0c850e8de96f843745fd5a4f8ca241f5b816c046a2204b397af

  • SSDEEP

    6144:dzvpRmcnFDThFkS9g89eg3jxeEYcHP0ytzH+ONrxJC0T:dXTRF580FHH/J

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9a9d9f70e5fbbe435cdff96e7443d3437bed1822cc0ffb9d8fdf629ea358ad6f

    • Size

      328KB

    • MD5

      992fdcdc8ba2d4e79f7f323eb2789393

    • SHA1

      2109e9c54d7b3fc869a9039c9c4a602bceb398c4

    • SHA256

      9a9d9f70e5fbbe435cdff96e7443d3437bed1822cc0ffb9d8fdf629ea358ad6f

    • SHA512

      38c7dccaf59cab526c1f88c50cd1819b2e3a3eec53e12c4bab466abbd1e6cdb46baddf65b9f9f0c850e8de96f843745fd5a4f8ca241f5b816c046a2204b397af

    • SSDEEP

      6144:dzvpRmcnFDThFkS9g89eg3jxeEYcHP0ytzH+ONrxJC0T:dXTRF580FHH/J

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks