cbd7c520183f5814c651b59f2b01b8a402c78e775ed809c84f6481fe40823bb7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d68e0722bcdef74aedf12ef7387a55e6a986576d
Size

365KB
Sample

230110-cxngjadd2z
MD5

d09efa17febffc2c4e0b93faa10c0329
SHA1

d68e0722bcdef74aedf12ef7387a55e6a986576d
SHA256

cbd7c520183f5814c651b59f2b01b8a402c78e775ed809c84f6481fe40823bb7
SHA512

0f3b3526959f2e61b91a2a37628ad940cfd47250c8701b1dcd8a6299a1b81aa14a9398ada012a4d19fb8c69769eb171b7a7e59dc4578e8552ba1aa131506ce73
SSDEEP

6144:gn7BvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmNV:gZ5j3CcxR0e7Uc7MOJIP1WGzUdNiCoj+

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  d68e0722bcdef74aedf12ef7387a55e6a986576d
- Size
  
  365KB
- MD5
  
  d09efa17febffc2c4e0b93faa10c0329
- SHA1
  
  d68e0722bcdef74aedf12ef7387a55e6a986576d
- SHA256
  
  cbd7c520183f5814c651b59f2b01b8a402c78e775ed809c84f6481fe40823bb7
- SHA512
  
  0f3b3526959f2e61b91a2a37628ad940cfd47250c8701b1dcd8a6299a1b81aa14a9398ada012a4d19fb8c69769eb171b7a7e59dc4578e8552ba1aa131506ce73
- SSDEEP
  
  6144:gn7BvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmNV:gZ5j3CcxR0e7Uc7MOJIP1WGzUdNiCoj+
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2