Overview

overview

10

Static

static

dda6004a9e...1a.exe

windows7-x64

10

dda6004a9e...1a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a

  • Size

    392KB

  • Sample

    230110-ctkw8sdb9t

  • MD5

    d2f32353877e6a4d412f2d0649c193fd

  • SHA1

    dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a

  • SHA256

    66c8ff770e8c901bb620a83842599ecfdf071567306849fbe9a6005c94ddd173

  • SHA512

    e7d66151867607b6bcbae57ced8ce33a5ff15477e57a92e461eb0c300bf125242edeba32328eecec8e0d460b37d3d5c8184f7f41bb7c03b397225ffcea73d081

  • SSDEEP

    12288:t1Uyau9eyDi8Zwb2FJxjTwQN5fg1Et2NL:tn9eyWKwkJxruFL

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a

    • Size

      392KB

    • MD5

      d2f32353877e6a4d412f2d0649c193fd

    • SHA1

      dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a

    • SHA256

      66c8ff770e8c901bb620a83842599ecfdf071567306849fbe9a6005c94ddd173

    • SHA512

      e7d66151867607b6bcbae57ced8ce33a5ff15477e57a92e461eb0c300bf125242edeba32328eecec8e0d460b37d3d5c8184f7f41bb7c03b397225ffcea73d081

    • SSDEEP

      12288:t1Uyau9eyDi8Zwb2FJxjTwQN5fg1Et2NL:tn9eyWKwkJxruFL

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks