Overview

overview

8

Static

static

3

9e8e12e480...a2.exe

windows7-x64

9e8e12e480...a2.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9e8e12e48012ab6348d6afae8fce65a2

  • Size

    668KB

  • Sample

    231222-qj8gfaffek

  • MD5

    9e8e12e48012ab6348d6afae8fce65a2

  • SHA1

    a9478f95aafa61f6f8d78da449e22210feb32412

  • SHA256

    af44f8f46181659fda2096b4fa17cb3e1376a687889ffc0974725f92e6ef31c2

  • SHA512

    e4b00d2cd28c7d4eade0efedd4f52cf84bd8e96e5e2bde523304ac5966743218de2f7ea4c7a53d0d81022afdeb2ca8dd7bbb9dd26155597c9242247173e2bdd3

  • SSDEEP

    12288:qCCGxTzAe2mjiVg69cvig5zccFZ1/HjqXcQfv+w1Ej+B:qClx30gKg6cFj/HjqMQfv0+B

Score
8/10
discoveryevasiontrojan

Malware Config

Targets

    • Target

      9e8e12e48012ab6348d6afae8fce65a2

    • Size

      668KB

    • MD5

      9e8e12e48012ab6348d6afae8fce65a2

    • SHA1

      a9478f95aafa61f6f8d78da449e22210feb32412

    • SHA256

      af44f8f46181659fda2096b4fa17cb3e1376a687889ffc0974725f92e6ef31c2

    • SHA512

      e4b00d2cd28c7d4eade0efedd4f52cf84bd8e96e5e2bde523304ac5966743218de2f7ea4c7a53d0d81022afdeb2ca8dd7bbb9dd26155597c9242247173e2bdd3

    • SSDEEP

      12288:qCCGxTzAe2mjiVg69cvig5zccFZ1/HjqXcQfv+w1Ej+B:qClx30gKg6cFj/HjqMQfv0+B

    Score
    8/10
    discoveryevasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks