Overview

overview

10

Static

static

589c80f269...50.exe

windows7-x64

10

589c80f269...50.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    589c80f2696fea25c74fd668b1d3c89f021a4650

  • Size

    408KB

  • Sample

    230110-cq6pjahe95

  • MD5

    db9af60761a6334a1ec2b32ea3e855dd

  • SHA1

    589c80f2696fea25c74fd668b1d3c89f021a4650

  • SHA256

    9f03a0256236a8fdc36b2e775efb2a079bccab5ed7769595231a6e400edc07e7

  • SHA512

    1914a85ca2cbc60ce2b8c74b57aef87ec81b21e589018e0f823950d41785452268f3aabb868a5c60a9ed44bd7a6cca58ee53826039f91f757bf14eb2c403482f

  • SSDEEP

    12288:XqyuF2dxmh6ZfYqAlSnshDYDJIxFunmcqOOi:AsmhmdshY90umq3

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      589c80f2696fea25c74fd668b1d3c89f021a4650

    • Size

      408KB

    • MD5

      db9af60761a6334a1ec2b32ea3e855dd

    • SHA1

      589c80f2696fea25c74fd668b1d3c89f021a4650

    • SHA256

      9f03a0256236a8fdc36b2e775efb2a079bccab5ed7769595231a6e400edc07e7

    • SHA512

      1914a85ca2cbc60ce2b8c74b57aef87ec81b21e589018e0f823950d41785452268f3aabb868a5c60a9ed44bd7a6cca58ee53826039f91f757bf14eb2c403482f

    • SSDEEP

      12288:XqyuF2dxmh6ZfYqAlSnshDYDJIxFunmcqOOi:AsmhmdshY90umq3

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks