Overview

overview

10

Static

static

56b2ed4168...4a.exe

windows7-x64

10

56b2ed4168...4a.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56b2ed4168a9ae9ffebead084809f6f256eba04a

  • Size

    364KB

  • Sample

    230110-cv9a8ahg68

  • MD5

    098f7deaf14f380726461f96d2c9c2ea

  • SHA1

    56b2ed4168a9ae9ffebead084809f6f256eba04a

  • SHA256

    08416c37ce652e369717b975c81e7d335cebeb4466cd1530be03785197023850

  • SHA512

    a956c6b365da39f22be1c5a5087a939c557b8566fe340c89579351c53cef1a58fdd94f42227eae1532375b3174c949c5e82c2f4e95386e42dcc35775897fb7e3

  • SSDEEP

    6144:qYsNBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmH:qXv5j3CcxR0e7Uc7MOJIP1WGzUdNiCo6

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      56b2ed4168a9ae9ffebead084809f6f256eba04a

    • Size

      364KB

    • MD5

      098f7deaf14f380726461f96d2c9c2ea

    • SHA1

      56b2ed4168a9ae9ffebead084809f6f256eba04a

    • SHA256

      08416c37ce652e369717b975c81e7d335cebeb4466cd1530be03785197023850

    • SHA512

      a956c6b365da39f22be1c5a5087a939c557b8566fe340c89579351c53cef1a58fdd94f42227eae1532375b3174c949c5e82c2f4e95386e42dcc35775897fb7e3

    • SSDEEP

      6144:qYsNBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmH:qXv5j3CcxR0e7Uc7MOJIP1WGzUdNiCo6

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks