Overview

overview

10

Static

static

3

67ba44274a...65.exe

windows7-x64

7

67ba44274a...65.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    67ba44274a012d736ff3b89e369a6623db5948b8f188e5360067bb28f4b22365.bin

  • Size

    1.5MB

  • Sample

    230506-18qb9sdf5s

  • MD5

    06eb386180d6cc1935db80f136a11f04

  • SHA1

    ddac8724a355740963396195a32c5c8d85fb6274

  • SHA256

    67ba44274a012d736ff3b89e369a6623db5948b8f188e5360067bb28f4b22365

  • SHA512

    1ccf44ef5f2c07f48c17a9769d9cd72dd8e0b3c25c212ad46ff7ea424749fee8ab7822567a286b72f5bddb87970631dccc1c8846c24fe60935a9833894936d2c

  • SSDEEP

    24576:PyrvUijL5YUnpdt0ZNk3t4I2d/ueBN9eiD8hrCQBvMEcReZTF5Gjs3kH4nEOMpQD:arv1jL5YUpTuN+tlOueBNc75vMEcReZl

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      67ba44274a012d736ff3b89e369a6623db5948b8f188e5360067bb28f4b22365.bin

    • Size

      1.5MB

    • MD5

      06eb386180d6cc1935db80f136a11f04

    • SHA1

      ddac8724a355740963396195a32c5c8d85fb6274

    • SHA256

      67ba44274a012d736ff3b89e369a6623db5948b8f188e5360067bb28f4b22365

    • SHA512

      1ccf44ef5f2c07f48c17a9769d9cd72dd8e0b3c25c212ad46ff7ea424749fee8ab7822567a286b72f5bddb87970631dccc1c8846c24fe60935a9833894936d2c

    • SSDEEP

      24576:PyrvUijL5YUnpdt0ZNk3t4I2d/ueBN9eiD8hrCQBvMEcReZTF5Gjs3kH4nEOMpQD:arv1jL5YUpTuN+tlOueBNc75vMEcReZl

    Score
    10/10
    persistenceevasiontrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks