Overview

overview

10

Static

static

4b14dd75ca...a0.exe

windows7-x64

10

4b14dd75ca...a0.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b14dd75ca0e8f61493cb41737584aa324c715a0

  • Size

    420KB

  • Sample

    230110-cmfnyahd48

  • MD5

    78ffa2644ce5d737b0093156ab96b4bf

  • SHA1

    4b14dd75ca0e8f61493cb41737584aa324c715a0

  • SHA256

    627ed063fdd51691b6deaac025b91d271411e0412f56cb2fe4ba980a8825fe79

  • SHA512

    187172a0392a8aa22c1d074a2e7d9ec6a60477c6a90c0a9b4ca13b98fa3ba91eccc6b3c298fe0db7f8daa96590abe0edd6aed338254e71daadf81b8c44a9c6c3

  • SSDEEP

    12288:rJSSF/FxvZyT6zpVJ6yrX0kx0JcgU3UI1gI:BrZywEc0ygUEP

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      4b14dd75ca0e8f61493cb41737584aa324c715a0

    • Size

      420KB

    • MD5

      78ffa2644ce5d737b0093156ab96b4bf

    • SHA1

      4b14dd75ca0e8f61493cb41737584aa324c715a0

    • SHA256

      627ed063fdd51691b6deaac025b91d271411e0412f56cb2fe4ba980a8825fe79

    • SHA512

      187172a0392a8aa22c1d074a2e7d9ec6a60477c6a90c0a9b4ca13b98fa3ba91eccc6b3c298fe0db7f8daa96590abe0edd6aed338254e71daadf81b8c44a9c6c3

    • SSDEEP

      12288:rJSSF/FxvZyT6zpVJ6yrX0kx0JcgU3UI1gI:BrZywEc0ygUEP

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks