Overview

overview

10

Static

static

3

2902e94171...a0.exe

windows7-x64

10

2902e94171...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2902e94171312a7b017dce0407ac3aed02f52d1d46bf170c7527a2d8a96d18a0.bin

  • Size

    1.0MB

  • Sample

    230506-zwyx7sed37

  • MD5

    170eeb366cf0cfdd58fbb885ba5ea32d

  • SHA1

    bee4766e81924ddd8b672df3bb9e5b24604db628

  • SHA256

    2902e94171312a7b017dce0407ac3aed02f52d1d46bf170c7527a2d8a96d18a0

  • SHA512

    b2e3ba8d9dc821b6ec34755eb0527246a833206db80b28e86ee8ef4babe36811631bf4b115cacb7b22edd5c1f0c7d896b22080ba07f99a0a7b821a0f794d1a03

  • SSDEEP

    24576:4ys6nNlPxmXUY89T18AMYKPFmvHO6D5/xUsWzpSbg60e6:/FNlaUt/PKNmms5/xUjpSbgi

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2902e94171312a7b017dce0407ac3aed02f52d1d46bf170c7527a2d8a96d18a0.bin

    • Size

      1.0MB

    • MD5

      170eeb366cf0cfdd58fbb885ba5ea32d

    • SHA1

      bee4766e81924ddd8b672df3bb9e5b24604db628

    • SHA256

      2902e94171312a7b017dce0407ac3aed02f52d1d46bf170c7527a2d8a96d18a0

    • SHA512

      b2e3ba8d9dc821b6ec34755eb0527246a833206db80b28e86ee8ef4babe36811631bf4b115cacb7b22edd5c1f0c7d896b22080ba07f99a0a7b821a0f794d1a03

    • SSDEEP

      24576:4ys6nNlPxmXUY89T18AMYKPFmvHO6D5/xUsWzpSbg60e6:/FNlaUt/PKNmms5/xUjpSbgi

    Score
    10/10
    evasionpersistencetrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks