Overview

overview

10

Static

static

3

0ebc6a1879...23.exe

windows7-x64

10

0ebc6a1879...23.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ebc6a18790a4579812bfa3a9c58eb23

  • Size

    392KB

  • Sample

    231230-e9mrwahae8

  • MD5

    0ebc6a18790a4579812bfa3a9c58eb23

  • SHA1

    2810ed592c7c0f1cf0497211910ad1a5cbe5b448

  • SHA256

    909e340b7a8cb745bc469f464723fd6872eb084cb3e83719bf8b138a389afd58

  • SHA512

    d75f80e7c965010f9e90d33450576dd7d3c3af4b1706c7508cd7f280d7fd6838aaf329000bc2ec9af22b8f62f25d4c06da9964ada36efb1ca405cad052b5f271

  • SSDEEP

    6144:3iP9+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEGiHU:3iQFe6CFkZZVryf9RlDLiPUwKsHU

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      0ebc6a18790a4579812bfa3a9c58eb23

    • Size

      392KB

    • MD5

      0ebc6a18790a4579812bfa3a9c58eb23

    • SHA1

      2810ed592c7c0f1cf0497211910ad1a5cbe5b448

    • SHA256

      909e340b7a8cb745bc469f464723fd6872eb084cb3e83719bf8b138a389afd58

    • SHA512

      d75f80e7c965010f9e90d33450576dd7d3c3af4b1706c7508cd7f280d7fd6838aaf329000bc2ec9af22b8f62f25d4c06da9964ada36efb1ca405cad052b5f271

    • SSDEEP

      6144:3iP9+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEGiHU:3iQFe6CFkZZVryf9RlDLiPUwKsHU

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks