Overview

overview

10

Static

static

3

481b36a8e1...aa.exe

windows7-x64

10

481b36a8e1...aa.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    481b36a8e1548f7cb3607379d5b514aa

  • Size

    380KB

  • Sample

    231226-bh65naacg5

  • MD5

    481b36a8e1548f7cb3607379d5b514aa

  • SHA1

    6e5e587868b28723685d71bcc97bea3b10e2fab9

  • SHA256

    9a3897f11d513669c4217c16ed91e8e8f433d2bef651cfa96ba73a57e50f54ed

  • SHA512

    e060aa2ace9d864f9faa12954fa897ea3ebb061ee8722a3f5ec8ebfd11d1559a66d131c8c1681250c289a3ac4eb6a4844b36405700d77a73ab1b34d0b3006cbc

  • SSDEEP

    6144:FIM8B5qX9ze/4K6X9yFRXQ7lJAmV4+f/qwXj9R430PC+sUt3o5Fq/+Vh:+Lqq4F9iRoACqwzzC+7o5w/Wh

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      481b36a8e1548f7cb3607379d5b514aa

    • Size

      380KB

    • MD5

      481b36a8e1548f7cb3607379d5b514aa

    • SHA1

      6e5e587868b28723685d71bcc97bea3b10e2fab9

    • SHA256

      9a3897f11d513669c4217c16ed91e8e8f433d2bef651cfa96ba73a57e50f54ed

    • SHA512

      e060aa2ace9d864f9faa12954fa897ea3ebb061ee8722a3f5ec8ebfd11d1559a66d131c8c1681250c289a3ac4eb6a4844b36405700d77a73ab1b34d0b3006cbc

    • SSDEEP

      6144:FIM8B5qX9ze/4K6X9yFRXQ7lJAmV4+f/qwXj9R430PC+sUt3o5Fq/+Vh:+Lqq4F9iRoACqwzzC+7o5w/Wh

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks