Overview

overview

10

Static

static

3

1be529fecb...0d.exe

windows7-x64

10

1be529fecb...0d.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1be529fecba6aed396271a7f122fd80d

  • Size

    432KB

  • Sample

    231230-zbn79sgcc4

  • MD5

    1be529fecba6aed396271a7f122fd80d

  • SHA1

    2a4248f2b0e5044fde0dfb7b9b51bdd75c24f750

  • SHA256

    845c8251bdc56b171f741f4cce7eca21709fcf436874df97eddcb3f69df9a68e

  • SHA512

    34990afca3651956ee5bc0c001a9c4b275d43b585f75006688661d74a11dd0c0c0283122b013d9722cdec3a11a08e85f050527ff30455abc252f84361cf4a18b

  • SSDEEP

    12288:TZ8sVivGAsHU7zu2YRgOkHUlGCP169Yx1a3aUeur+r:F+v7zuRRflGC4iXCqur2

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      1be529fecba6aed396271a7f122fd80d

    • Size

      432KB

    • MD5

      1be529fecba6aed396271a7f122fd80d

    • SHA1

      2a4248f2b0e5044fde0dfb7b9b51bdd75c24f750

    • SHA256

      845c8251bdc56b171f741f4cce7eca21709fcf436874df97eddcb3f69df9a68e

    • SHA512

      34990afca3651956ee5bc0c001a9c4b275d43b585f75006688661d74a11dd0c0c0283122b013d9722cdec3a11a08e85f050527ff30455abc252f84361cf4a18b

    • SSDEEP

      12288:TZ8sVivGAsHU7zu2YRgOkHUlGCP169Yx1a3aUeur+r:F+v7zuRRflGC4iXCqur2

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks