Overview

overview

10

Static

static

3

e9d1f601b2...43.exe

windows7-x64

10

e9d1f601b2...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9d1f601b2c0a916f94dc03ec8ae5b37284ff8b80beac6feab5ffe47dcc04343.bin

  • Size

    612KB

  • Sample

    230505-y2wjlaee2y

  • MD5

    fb531cc4645ef38e8e709ffdeffe8599

  • SHA1

    6d4e8079ff6e24343206da15a08e479abd06352c

  • SHA256

    e9d1f601b2c0a916f94dc03ec8ae5b37284ff8b80beac6feab5ffe47dcc04343

  • SHA512

    3313c4914e65b4053c1511fe4211eb8d27d6077543dbcc84b5aa6a25a2fc106106e10852dcdaafea0559daf4358ef2d8c1c4c103444ac1d3a98cb3945090f96a

  • SSDEEP

    12288:Oy90bhVcM1KdssAJhVgQeUQRcZwzdJ+MbU:Oy+zKesAJhVgwezb+AU

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      e9d1f601b2c0a916f94dc03ec8ae5b37284ff8b80beac6feab5ffe47dcc04343.bin

    • Size

      612KB

    • MD5

      fb531cc4645ef38e8e709ffdeffe8599

    • SHA1

      6d4e8079ff6e24343206da15a08e479abd06352c

    • SHA256

      e9d1f601b2c0a916f94dc03ec8ae5b37284ff8b80beac6feab5ffe47dcc04343

    • SHA512

      3313c4914e65b4053c1511fe4211eb8d27d6077543dbcc84b5aa6a25a2fc106106e10852dcdaafea0559daf4358ef2d8c1c4c103444ac1d3a98cb3945090f96a

    • SSDEEP

      12288:Oy90bhVcM1KdssAJhVgQeUQRcZwzdJ+MbU:Oy+zKesAJhVgwezb+AU

    Score
    10/10
    evasionpersistencetrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks