Overview

overview

10

Static

static

5a104d9f16...b0.exe

windows7-x64

10

5a104d9f16...b0.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a104d9f166fdf47d95ec9b7b835bf91afd0b2b0

  • Size

    412KB

  • Sample

    230110-b87h4sgh22

  • MD5

    7c25c4b64edaa863b009ce25ef6aab40

  • SHA1

    5a104d9f166fdf47d95ec9b7b835bf91afd0b2b0

  • SHA256

    7c7349314d21b4e34ba8ac7a2950b010863f04c526c21b7de0b2bc7e8711ded3

  • SHA512

    07d5c30a36d0523207c4f02cd089f17f17eef3cef3ce253eeefef9fb5ea0814a9e3dee58460c061f49ffdcd697476e3d3685480639d22182062d473c85090c0d

  • SSDEEP

    12288:tRHvvqdAY5sG80Al4tRhGyYw39jRwOSY7:tBa5smhJf9jRwOSY

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5a104d9f166fdf47d95ec9b7b835bf91afd0b2b0

    • Size

      412KB

    • MD5

      7c25c4b64edaa863b009ce25ef6aab40

    • SHA1

      5a104d9f166fdf47d95ec9b7b835bf91afd0b2b0

    • SHA256

      7c7349314d21b4e34ba8ac7a2950b010863f04c526c21b7de0b2bc7e8711ded3

    • SHA512

      07d5c30a36d0523207c4f02cd089f17f17eef3cef3ce253eeefef9fb5ea0814a9e3dee58460c061f49ffdcd697476e3d3685480639d22182062d473c85090c0d

    • SSDEEP

      12288:tRHvvqdAY5sG80Al4tRhGyYw39jRwOSY7:tBa5smhJf9jRwOSY

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks