Overview

overview

10

Static

static

3

49a449bf46...05.exe

windows7-x64

10

49a449bf46...05.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49a449bf46cec3eb8bb27f227e3d2a05

  • Size

    428KB

  • Sample

    231226-bysxzadaf6

  • MD5

    49a449bf46cec3eb8bb27f227e3d2a05

  • SHA1

    bbeed3de737ec2721896bbffd9c4a7212ab34a06

  • SHA256

    78951d04a8ba2fe460a8374515048f80f97376135bed0713190b7c997d78ac42

  • SHA512

    e2118ac0308b47358c76052a8d4b14c3a2e771cfc6cdfaad582b4d7624078a441cd8d80b6a02eab918cf20481bc633a267071c72e49c75a202450fc790942323

  • SSDEEP

    12288:jJX4e1RLSeHKyS/J+UKLxxQlef8QWvCW+k+8:tXbEeHKyS/HJK/

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      49a449bf46cec3eb8bb27f227e3d2a05

    • Size

      428KB

    • MD5

      49a449bf46cec3eb8bb27f227e3d2a05

    • SHA1

      bbeed3de737ec2721896bbffd9c4a7212ab34a06

    • SHA256

      78951d04a8ba2fe460a8374515048f80f97376135bed0713190b7c997d78ac42

    • SHA512

      e2118ac0308b47358c76052a8d4b14c3a2e771cfc6cdfaad582b4d7624078a441cd8d80b6a02eab918cf20481bc633a267071c72e49c75a202450fc790942323

    • SSDEEP

      12288:jJX4e1RLSeHKyS/J+UKLxxQlef8QWvCW+k+8:tXbEeHKyS/HJK/

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks