Overview

overview

10

Static

static

3

007a1c5b6e...a5.exe

windows7-x64

10

007a1c5b6e...a5.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    007a1c5b6ec4eb7cc54d5157b36f59a5

  • Size

    380KB

  • Sample

    231224-rn7alsfhb6

  • MD5

    007a1c5b6ec4eb7cc54d5157b36f59a5

  • SHA1

    771ad718fb9e8c74e7c0db9ee77d52c83c055850

  • SHA256

    42679d618b11458941d58518d8cce678b934dc924d3cd8a36505bca3cd4448aa

  • SHA512

    29124ce502ee464129709a97fbdf367ba7f9060da17048c38e2510acc56b4c9747a12a405f20b4629004697c9e7e68caf5e33afc636c138d58306fa7f14c7525

  • SSDEEP

    6144:NBXOwgT/Wj1qdqxXE+Sey+n2UjVWIQk3HYEdOMwHQsmxVCItALw7OE/Uk6BR:NhOwpxqdqxXf2U8yHrOBHQsgVCEtN/jS

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      007a1c5b6ec4eb7cc54d5157b36f59a5

    • Size

      380KB

    • MD5

      007a1c5b6ec4eb7cc54d5157b36f59a5

    • SHA1

      771ad718fb9e8c74e7c0db9ee77d52c83c055850

    • SHA256

      42679d618b11458941d58518d8cce678b934dc924d3cd8a36505bca3cd4448aa

    • SHA512

      29124ce502ee464129709a97fbdf367ba7f9060da17048c38e2510acc56b4c9747a12a405f20b4629004697c9e7e68caf5e33afc636c138d58306fa7f14c7525

    • SSDEEP

      6144:NBXOwgT/Wj1qdqxXE+Sey+n2UjVWIQk3HYEdOMwHQsmxVCItALw7OE/Uk6BR:NhOwpxqdqxXf2U8yHrOBHQsgVCEtN/jS

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks