Overview

overview

10

Static

static

3

cdb0374bd9...9a.exe

windows7-x64

10

cdb0374bd9...9a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cdb0374bd9de384f38730a53ed5bf93e054645ce36aa21a86e3d2ccf62f2049a.bin

  • Size

    697KB

  • Sample

    230505-ydydaaaa97

  • MD5

    61776bd96c91d479b1040535d13275bd

  • SHA1

    1eb07a8a7c279fbf45339d4d29572c1e571ce70b

  • SHA256

    cdb0374bd9de384f38730a53ed5bf93e054645ce36aa21a86e3d2ccf62f2049a

  • SHA512

    5ae7e7d4ec73aadd5e7162838486fbd023b9bcf42df4952299cfacad06fb945d57554b41d963cab2913a20d5d8c6be90388e1e53dfb6ea2f905ac57a1bf2666b

  • SSDEEP

    12288:Ey90aQhOtNPYDKkJ6veG/pjYpG//1K1jKLhd+su3a6t2KqFF+JZ:EyJQcYDKkJ6//BKuhtUl2J8JZ

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      cdb0374bd9de384f38730a53ed5bf93e054645ce36aa21a86e3d2ccf62f2049a.bin

    • Size

      697KB

    • MD5

      61776bd96c91d479b1040535d13275bd

    • SHA1

      1eb07a8a7c279fbf45339d4d29572c1e571ce70b

    • SHA256

      cdb0374bd9de384f38730a53ed5bf93e054645ce36aa21a86e3d2ccf62f2049a

    • SHA512

      5ae7e7d4ec73aadd5e7162838486fbd023b9bcf42df4952299cfacad06fb945d57554b41d963cab2913a20d5d8c6be90388e1e53dfb6ea2f905ac57a1bf2666b

    • SSDEEP

      12288:Ey90aQhOtNPYDKkJ6veG/pjYpG//1K1jKLhd+su3a6t2KqFF+JZ:EyJQcYDKkJ6//BKuhtUl2J8JZ

    Score
    10/10
    evasionpersistencetrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks