Overview

overview

10

Static

static

a6fde81c99...ce.exe

windows7-x64

10

a6fde81c99...ce.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a6fde81c99e02940ab27792ff13c0ce3895e1db4b06f5f741d33bf0865800dce

  • Size

    370KB

  • Sample

    221206-cln9page44

  • MD5

    75dc8cbccad03a49c001a8722138413b

  • SHA1

    89fdc57e0c1bcef048579108e6c8c95318ad2f1b

  • SHA256

    a6fde81c99e02940ab27792ff13c0ce3895e1db4b06f5f741d33bf0865800dce

  • SHA512

    b0fd999b42fb7aa89a5ef666a9fb0f34d675eeddfa849f260de9c7d96d7cba9d453e4c212364b1894ad948066f2ce2eaaf59bb20452ab806368383990bfafa7f

  • SSDEEP

    6144:0uDeBKecBsNEgXtYtaTexGGRA+VSQl0WgaBmh2Rmg1KBqcAK3:/De0zsNEgXtrOGcA+YQl05EX1KBRAK3

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a6fde81c99e02940ab27792ff13c0ce3895e1db4b06f5f741d33bf0865800dce

    • Size

      370KB

    • MD5

      75dc8cbccad03a49c001a8722138413b

    • SHA1

      89fdc57e0c1bcef048579108e6c8c95318ad2f1b

    • SHA256

      a6fde81c99e02940ab27792ff13c0ce3895e1db4b06f5f741d33bf0865800dce

    • SHA512

      b0fd999b42fb7aa89a5ef666a9fb0f34d675eeddfa849f260de9c7d96d7cba9d453e4c212364b1894ad948066f2ce2eaaf59bb20452ab806368383990bfafa7f

    • SSDEEP

      6144:0uDeBKecBsNEgXtYtaTexGGRA+VSQl0WgaBmh2Rmg1KBqcAK3:/De0zsNEgXtrOGcA+YQl05EX1KBRAK3

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks