Overview

overview

10

Static

static

3

5a82ad0121...b4.exe

windows7-x64

10

5a82ad0121...b4.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a82ad0121e83b7fb98e9084078e46b4

  • Size

    337KB

  • Sample

    231226-hh3wkagdfk

  • MD5

    5a82ad0121e83b7fb98e9084078e46b4

  • SHA1

    5fd63bf280b69358d16a5a6423fa576f83e6f1f3

  • SHA256

    17d75541d779ba4618282a9b055f4eb8d30af8b10f4058ca519ea35aa51e2b00

  • SHA512

    90a015f3cfcaf69e7e3f3e1356d391cc3d717e8f3c7c901503a4abd140667ca019b94dafce6c1add53036b2cd241c9ac028365cf159b27190e2cfa23edfc7e03

  • SSDEEP

    6144:Whk7p4oiM3rk9dnyyw4D4dTV8c444ZIJhSvOJxc57vHhfhUSJ:qk7p1rAw4DG8cVhSvOiNhUS

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5a82ad0121e83b7fb98e9084078e46b4

    • Size

      337KB

    • MD5

      5a82ad0121e83b7fb98e9084078e46b4

    • SHA1

      5fd63bf280b69358d16a5a6423fa576f83e6f1f3

    • SHA256

      17d75541d779ba4618282a9b055f4eb8d30af8b10f4058ca519ea35aa51e2b00

    • SHA512

      90a015f3cfcaf69e7e3f3e1356d391cc3d717e8f3c7c901503a4abd140667ca019b94dafce6c1add53036b2cd241c9ac028365cf159b27190e2cfa23edfc7e03

    • SSDEEP

      6144:Whk7p4oiM3rk9dnyyw4D4dTV8c444ZIJhSvOJxc57vHhfhUSJ:qk7p1rAw4DG8cVhSvOiNhUS

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks