Overview

overview

10

Static

static

10

D677F86403...A8.exe

windows7-x64

10

D677F86403...A8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    D677F86403915B15AB62B1278CC7E6A8F2A98DE2BA6A8.exe

  • Size

    804KB

  • Sample

    230124-27jnrseb63

  • MD5

    2389e42ff51d5ad1f896a23cf8aa846e

  • SHA1

    a04d40e9ff1b51b0fd606b57dbe17d737c6b08c7

  • SHA256

    d677f86403915b15ab62b1278cc7e6a8f2a98de2ba6a84ee67e06c1ffd696bc1

  • SHA512

    27054d642ce4be6791ce49f317628371052c0992d02129cbc07128e3f1f3338631d71226b5428a713104735daedccd5c9f5aea6e17161447a9b05bb8b42d5c10

  • SSDEEP

    24576:U/fprVmqZKA9JgLLK8ltKTrk/9efaTh6QAJ:GhMwcToQAJ

Score
10/10
privateloaderevasiontrojan

Malware Config

Targets

    • Target

      D677F86403915B15AB62B1278CC7E6A8F2A98DE2BA6A8.exe

    • Size

      804KB

    • MD5

      2389e42ff51d5ad1f896a23cf8aa846e

    • SHA1

      a04d40e9ff1b51b0fd606b57dbe17d737c6b08c7

    • SHA256

      d677f86403915b15ab62b1278cc7e6a8f2a98de2ba6a84ee67e06c1ffd696bc1

    • SHA512

      27054d642ce4be6791ce49f317628371052c0992d02129cbc07128e3f1f3338631d71226b5428a713104735daedccd5c9f5aea6e17161447a9b05bb8b42d5c10

    • SSDEEP

      24576:U/fprVmqZKA9JgLLK8ltKTrk/9efaTh6QAJ:GhMwcToQAJ

    Score
    10/10
    evasiontrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

        Discovery

          Execution

            Exfiltration

              Impact

                Initial Access

                  Lateral Movement

                    Persistence

                    Privilege Escalation

                      Tasks