Overview

overview

10

Static

static

4602e87eda...91.exe

windows7-x64

10

4602e87eda...91.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    4602e87edace4604d2a1d3b532cd727a56161191

  • Size

    408KB

  • Sample

    230110-c6xrkaac92

  • MD5

    17696629f21cd77fe77ea8784bb63ad1

  • SHA1

    4602e87edace4604d2a1d3b532cd727a56161191

  • SHA256

    4e79299ea849a6b6a8b1dc0d5ed86534143ee0c8f262078edd850a6e3be8105e

  • SHA512

    535b5d676a50eb271ff353ba608a516a31b5a8b5dba5132a695ad805f5734b8f8b212c91e48032d062817d80a811c9d349defbe1510a7febcaf40f06acf5bf6b

  • SSDEEP

    12288:GoyFKlh/lB83lHpRUDQBBZkVm8NKprKwrK0L:GybB8VHnU8BBZSNGXK0L

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      4602e87edace4604d2a1d3b532cd727a56161191

    • Size

      408KB

    • MD5

      17696629f21cd77fe77ea8784bb63ad1

    • SHA1

      4602e87edace4604d2a1d3b532cd727a56161191

    • SHA256

      4e79299ea849a6b6a8b1dc0d5ed86534143ee0c8f262078edd850a6e3be8105e

    • SHA512

      535b5d676a50eb271ff353ba608a516a31b5a8b5dba5132a695ad805f5734b8f8b212c91e48032d062817d80a811c9d349defbe1510a7febcaf40f06acf5bf6b

    • SSDEEP

      12288:GoyFKlh/lB83lHpRUDQBBZkVm8NKprKwrK0L:GybB8VHnU8BBZSNGXK0L

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks