Overview

overview

10

Static

static

5504b83fbc...50.exe

windows7-x64

10

5504b83fbc...50.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5504b83fbc4e428cae21464fcd847c38c4950550

  • Size

    408KB

  • Sample

    230110-cremfadb2s

  • MD5

    e40ce66e908668b0c4d798ae86e4ad48

  • SHA1

    5504b83fbc4e428cae21464fcd847c38c4950550

  • SHA256

    14a8d98b24803f047ab7db4a49715a31660afd9b9d74b0e9dbbd3082892b7455

  • SHA512

    c8f26626a9826f20d1c8c631237da434e77a8b84c172428af7105d8e76cb22a2bd47c5c4feb999a261354f9494fd2eb4fdd9b5da7c871d0107a9bbabc76689f3

  • SSDEEP

    12288:aqyuF2dxmh6ZfYqAlSnshDHDJIxFunmcqOOi:lsmhmdshH90umq3

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5504b83fbc4e428cae21464fcd847c38c4950550

    • Size

      408KB

    • MD5

      e40ce66e908668b0c4d798ae86e4ad48

    • SHA1

      5504b83fbc4e428cae21464fcd847c38c4950550

    • SHA256

      14a8d98b24803f047ab7db4a49715a31660afd9b9d74b0e9dbbd3082892b7455

    • SHA512

      c8f26626a9826f20d1c8c631237da434e77a8b84c172428af7105d8e76cb22a2bd47c5c4feb999a261354f9494fd2eb4fdd9b5da7c871d0107a9bbabc76689f3

    • SSDEEP

      12288:aqyuF2dxmh6ZfYqAlSnshDHDJIxFunmcqOOi:lsmhmdshH90umq3

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks