Overview

overview

10

Static

static

3

226205b1b5...43.exe

windows7-x64

10

226205b1b5...43.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    226205b1b51edba084f586c5bf32715597a2692ac73256eabba2a21e453fca43.bin

  • Size

    1.1MB

  • Sample

    230506-zr49esfh41

  • MD5

    804d436b388f5038bb4dd7d00242c29f

  • SHA1

    7ef599cfb5ed3a7a7a9be53f1564eac79ddef6a3

  • SHA256

    226205b1b51edba084f586c5bf32715597a2692ac73256eabba2a21e453fca43

  • SHA512

    27d5f2b5ad6c9b8a6da520b11a144269b751078c4dc1db2d4bce4725ebf4b1c2207a4a6beba4a9c8b22fe0ea8b9c3d0db13df8de161f348af3df9ed01e2d24a2

  • SSDEEP

    24576:4yOyhE63YTrmkrShjpj1XKVNZ1ESqt6FpJ8bHX7/Ob9:/CJbkjN1X+FpezL

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      226205b1b51edba084f586c5bf32715597a2692ac73256eabba2a21e453fca43.bin

    • Size

      1.1MB

    • MD5

      804d436b388f5038bb4dd7d00242c29f

    • SHA1

      7ef599cfb5ed3a7a7a9be53f1564eac79ddef6a3

    • SHA256

      226205b1b51edba084f586c5bf32715597a2692ac73256eabba2a21e453fca43

    • SHA512

      27d5f2b5ad6c9b8a6da520b11a144269b751078c4dc1db2d4bce4725ebf4b1c2207a4a6beba4a9c8b22fe0ea8b9c3d0db13df8de161f348af3df9ed01e2d24a2

    • SSDEEP

      24576:4yOyhE63YTrmkrShjpj1XKVNZ1ESqt6FpJ8bHX7/Ob9:/CJbkjN1X+FpezL

    Score
    10/10
    evasionpersistencetrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks