Overview

overview

10

Static

static

db52d4b4af...bf.exe

windows7-x64

10

db52d4b4af...bf.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    db52d4b4af4ef413914188ac3b22957121120abf

  • Size

    408KB

  • Sample

    230110-dbb22sae84

  • MD5

    a0f33078bfa1baf0e6dd277ea380adff

  • SHA1

    db52d4b4af4ef413914188ac3b22957121120abf

  • SHA256

    f32ee57fc0e1b4c281f049f10f4de0dc4c40be344a540521bb5254b9ffdbf9eb

  • SHA512

    1baeb2d328490eff85f86721824809bd852465e48a0edfcd26259f4a9c19455c8e498446c98f241fdf0dcfaf85c36939dd9d025e69656b7f079fa968ba87cd3c

  • SSDEEP

    12288:9oyFKlh/lB83lHpRUDQBBZkVm8NfprKwrK0L:9ybB8VHnU8BBZSNhXK0L

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      db52d4b4af4ef413914188ac3b22957121120abf

    • Size

      408KB

    • MD5

      a0f33078bfa1baf0e6dd277ea380adff

    • SHA1

      db52d4b4af4ef413914188ac3b22957121120abf

    • SHA256

      f32ee57fc0e1b4c281f049f10f4de0dc4c40be344a540521bb5254b9ffdbf9eb

    • SHA512

      1baeb2d328490eff85f86721824809bd852465e48a0edfcd26259f4a9c19455c8e498446c98f241fdf0dcfaf85c36939dd9d025e69656b7f079fa968ba87cd3c

    • SSDEEP

      12288:9oyFKlh/lB83lHpRUDQBBZkVm8NfprKwrK0L:9ybB8VHnU8BBZSNhXK0L

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks