Overview

overview

10

Static

static

3

76c6da251f...2e.exe

windows7-x64

10

76c6da251f...2e.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    76c6da251ff5517901c3543871c8502e

  • Size

    396KB

  • Sample

    231226-r6rmwaafa4

  • MD5

    76c6da251ff5517901c3543871c8502e

  • SHA1

    5de99cf850716fad4072bfecd15a0de0f17deff1

  • SHA256

    5579ebe855d9b02826592a82d4ec627b41af3e6d43caada442b240424c4c0804

  • SHA512

    d63cf288a2e62cb726e7c7202d0d2e2262ff9440669a0421f43e100826e69c55bc758349e23f9ddaa0efeb3d9b7f4f7fff3ca490e2286d16832037221a57fc59

  • SSDEEP

    6144:v4yp6NVyX7Mq28roVnDtdI1o3hwz9yD38HseQtR29Q/vCRJN:vG0rN28rohs1o3hy9sgZ

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      76c6da251ff5517901c3543871c8502e

    • Size

      396KB

    • MD5

      76c6da251ff5517901c3543871c8502e

    • SHA1

      5de99cf850716fad4072bfecd15a0de0f17deff1

    • SHA256

      5579ebe855d9b02826592a82d4ec627b41af3e6d43caada442b240424c4c0804

    • SHA512

      d63cf288a2e62cb726e7c7202d0d2e2262ff9440669a0421f43e100826e69c55bc758349e23f9ddaa0efeb3d9b7f4f7fff3ca490e2286d16832037221a57fc59

    • SSDEEP

      6144:v4yp6NVyX7Mq28roVnDtdI1o3hwz9yD38HseQtR29Q/vCRJN:vG0rN28rohs1o3hy9sgZ

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks