Overview

overview

10

Static

static

820c16e3ef...f2.exe

windows7-x64

10

820c16e3ef...f2.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    820c16e3efdd7b0ed28d290f9a91ca5a63d8adf2

  • Size

    392KB

  • Sample

    230110-cstsradb61

  • MD5

    1f6b0db1dd5229819ce370253879b939

  • SHA1

    820c16e3efdd7b0ed28d290f9a91ca5a63d8adf2

  • SHA256

    e61c9b57c764d468caf8aeca6f509290f2f4be9c74d3459465aa3c094ce890f9

  • SHA512

    c699be13fbeec130f3f6f95701bbd71a45ae0ec12b254ed901dfc02fd2dbc3ca8f10e621badb06da231d377d3c8424934ed834c97602767dc70fb7c11dddb919

  • SSDEEP

    12288:8DXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:8R9eyWKwkJxruLUb

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      820c16e3efdd7b0ed28d290f9a91ca5a63d8adf2

    • Size

      392KB

    • MD5

      1f6b0db1dd5229819ce370253879b939

    • SHA1

      820c16e3efdd7b0ed28d290f9a91ca5a63d8adf2

    • SHA256

      e61c9b57c764d468caf8aeca6f509290f2f4be9c74d3459465aa3c094ce890f9

    • SHA512

      c699be13fbeec130f3f6f95701bbd71a45ae0ec12b254ed901dfc02fd2dbc3ca8f10e621badb06da231d377d3c8424934ed834c97602767dc70fb7c11dddb919

    • SSDEEP

      12288:8DXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:8R9eyWKwkJxruLUb

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks