Overview

overview

10

Static

static

4ae75f779b...99.exe

windows7-x64

10

4ae75f779b...99.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ae75f779b27d95d33d9d1611a929f91ccfd8b99

  • Size

    432KB

  • Sample

    230110-cnpm8shd87

  • MD5

    1b018d2a6ad00bbb0234c70ebecc5f01

  • SHA1

    4ae75f779b27d95d33d9d1611a929f91ccfd8b99

  • SHA256

    511eaa288ccc82e406b899ddc58c94e256b038cf7b1aefbc9061caee9cd72265

  • SHA512

    3b5122dda3ab994bee136f2878c7d283e9d1ea96ff7afe67f905e7fc5b55090a248431d5ae34084e184184bcf49066859920959112bd864d09eabac9bffac79c

  • SSDEEP

    6144:8yiMagk06qtnhKZ53rw9mN7bTlPPfewOZwMUQS1GTMNxsFTmekZaGemyLf97IlO3:8yiq6qRYv3rpQIQkGINxsQ5mSr

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      4ae75f779b27d95d33d9d1611a929f91ccfd8b99

    • Size

      432KB

    • MD5

      1b018d2a6ad00bbb0234c70ebecc5f01

    • SHA1

      4ae75f779b27d95d33d9d1611a929f91ccfd8b99

    • SHA256

      511eaa288ccc82e406b899ddc58c94e256b038cf7b1aefbc9061caee9cd72265

    • SHA512

      3b5122dda3ab994bee136f2878c7d283e9d1ea96ff7afe67f905e7fc5b55090a248431d5ae34084e184184bcf49066859920959112bd864d09eabac9bffac79c

    • SSDEEP

      6144:8yiMagk06qtnhKZ53rw9mN7bTlPPfewOZwMUQS1GTMNxsFTmekZaGemyLf97IlO3:8yiq6qRYv3rpQIQkGINxsQ5mSr

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks