Overview

overview

10

Static

static

7b90d711b0...e0.exe

windows7-x64

10

7b90d711b0...e0.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0

  • Size

    444KB

  • Sample

    230110-ccxvgace3v

  • MD5

    5d5668bb4ab52adafe0d23a21c1a7e0d

  • SHA1

    7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0

  • SHA256

    deed2e1b5196f7adb36c18e789446ee9680c42c8801556e3d48600dd13261228

  • SHA512

    e1d79adb93398dfeceec44cd6f08fb78f2ed96ce5e5580a4362420b0e6ea074342bc07fcf8fb593fc5401a75109c792c3c4519fe96fbd0ee0966b6e66f43e913

  • SSDEEP

    6144:vftyYc1YYY3VB9dI3Y0aD3ZgEgwTb/FCyKYs7A2e2s5odiMQuQqiWPMjTdRWTbRk:3hdLT1X7gyKR7Q2PyXW0j5cvn/

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0

    • Size

      444KB

    • MD5

      5d5668bb4ab52adafe0d23a21c1a7e0d

    • SHA1

      7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0

    • SHA256

      deed2e1b5196f7adb36c18e789446ee9680c42c8801556e3d48600dd13261228

    • SHA512

      e1d79adb93398dfeceec44cd6f08fb78f2ed96ce5e5580a4362420b0e6ea074342bc07fcf8fb593fc5401a75109c792c3c4519fe96fbd0ee0966b6e66f43e913

    • SSDEEP

      6144:vftyYc1YYY3VB9dI3Y0aD3ZgEgwTb/FCyKYs7A2e2s5odiMQuQqiWPMjTdRWTbRk:3hdLT1X7gyKR7Q2PyXW0j5cvn/

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks