Overview

overview

10

Static

static

3

11ece73cad...fb.exe

windows7-x64

10

11ece73cad...fb.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    11ece73cadb5e695cea42aed921415fb

  • Size

    416KB

  • Sample

    231225-kb9rmsahbm

  • MD5

    11ece73cadb5e695cea42aed921415fb

  • SHA1

    1701e21e788dfc0687d2e2c231881e58578778ac

  • SHA256

    7460ef16b409d6e8261a45aac83dd1b14221a683f6eff8d91d5002a9d14d35c5

  • SHA512

    d7c9cabf1513a5eed1d18706c8ecfc251dfd54a09be3fbde72fad745e911c32a69d4657260f3bf551c069d65ed77d1e3f44a013fc1318a752a6f2e91b97c4555

  • SSDEEP

    6144:xFXIg3Xl7XQb6v1gxMHgJVbWd9BiRqSxcVXVc0avukG+A+3FXxnC1/mxQcKlIOh5:xFrX9ghBWd9BiVxcVXyvuWPC1CQBhc6

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      11ece73cadb5e695cea42aed921415fb

    • Size

      416KB

    • MD5

      11ece73cadb5e695cea42aed921415fb

    • SHA1

      1701e21e788dfc0687d2e2c231881e58578778ac

    • SHA256

      7460ef16b409d6e8261a45aac83dd1b14221a683f6eff8d91d5002a9d14d35c5

    • SHA512

      d7c9cabf1513a5eed1d18706c8ecfc251dfd54a09be3fbde72fad745e911c32a69d4657260f3bf551c069d65ed77d1e3f44a013fc1318a752a6f2e91b97c4555

    • SSDEEP

      6144:xFXIg3Xl7XQb6v1gxMHgJVbWd9BiRqSxcVXVc0avukG+A+3FXxnC1/mxQcKlIOh5:xFrX9ghBWd9BiVxcVXyvuWPC1CQBhc6

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks