97d078fa7aa4da9685c1e38165b65637de5df4495a8569bfd8ef8f62e8394dd8 | Triage

Sharing

General

Target

d004ec0bbf4e7b00850b0a88c9c95c2176bdaad8
Size

408KB
Sample

230110-danpfsae65
MD5

9feba60c87d6e23f1425917d6ef0ab38
SHA1

d004ec0bbf4e7b00850b0a88c9c95c2176bdaad8
SHA256

97d078fa7aa4da9685c1e38165b65637de5df4495a8569bfd8ef8f62e8394dd8
SHA512

7cf5b2ad3e61e89c973d5c435c4c62bc076b62a00e7d42b9a067ab6c26242e3d399dc4d9331f3e1f53ec4dbdd75b1a259d8fd86f193a6ab7fdc986809debac6d
SSDEEP

6144:lbU7oLEbc/v9YRNgvvV55rS9znnuAgzjx8wxuoXF+TADUVbW5Tfh6ZFd:lnac/o6vvV5NS9zIjxNjKkfh6

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  d004ec0bbf4e7b00850b0a88c9c95c2176bdaad8
- Size
  
  408KB
- MD5
  
  9feba60c87d6e23f1425917d6ef0ab38
- SHA1
  
  d004ec0bbf4e7b00850b0a88c9c95c2176bdaad8
- SHA256
  
  97d078fa7aa4da9685c1e38165b65637de5df4495a8569bfd8ef8f62e8394dd8
- SHA512
  
  7cf5b2ad3e61e89c973d5c435c4c62bc076b62a00e7d42b9a067ab6c26242e3d399dc4d9331f3e1f53ec4dbdd75b1a259d8fd86f193a6ab7fdc986809debac6d
- SSDEEP
  
  6144:lbU7oLEbc/v9YRNgvvV55rS9znnuAgzjx8wxuoXF+TADUVbW5Tfh6ZFd:lnac/o6vvV5NS9zIjxNjKkfh6
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2