Overview

overview

10

Static

static

3

b834a073b3...ff.exe

windows7-x64

10

b834a073b3...ff.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b834a073b3390ca2da20a273c83f6f67c92677f653cf38efc016f783cbcac2ff.bin

  • Size

    695KB

  • Sample

    230505-xv6wbaae3x

  • MD5

    b8ad059ae0933cd647f8afc4356bbe16

  • SHA1

    abf3fc6476fa6d9235acf7611b7787bfc00b8059

  • SHA256

    b834a073b3390ca2da20a273c83f6f67c92677f653cf38efc016f783cbcac2ff

  • SHA512

    02e865a8eac12dd54e686c2d5c34c7d52b63760f6f9bf3999b5828241e0ff57bd20a0fc4f90658e794c780f4f76a63befc6fa0a2f2d19b783e51b1e45b259578

  • SSDEEP

    12288:Ky90GcmoxrnJ1gHe5I3aSIC4rIs1qvW16c218b0K6A+jKO8G5i7as+I:KyvcmopJicC4NAS6c218b0VgO82i+rI

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      b834a073b3390ca2da20a273c83f6f67c92677f653cf38efc016f783cbcac2ff.bin

    • Size

      695KB

    • MD5

      b8ad059ae0933cd647f8afc4356bbe16

    • SHA1

      abf3fc6476fa6d9235acf7611b7787bfc00b8059

    • SHA256

      b834a073b3390ca2da20a273c83f6f67c92677f653cf38efc016f783cbcac2ff

    • SHA512

      02e865a8eac12dd54e686c2d5c34c7d52b63760f6f9bf3999b5828241e0ff57bd20a0fc4f90658e794c780f4f76a63befc6fa0a2f2d19b783e51b1e45b259578

    • SSDEEP

      12288:Ky90GcmoxrnJ1gHe5I3aSIC4rIs1qvW16c218b0K6A+jKO8G5i7as+I:KyvcmopJicC4NAS6c218b0VgO82i+rI

    Score
    10/10
    evasionpersistencetrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks