Overview

overview

10

Static

static

3

23c8ee12c7...7a.exe

windows7-x64

10

23c8ee12c7...7a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23c8ee12c7e7269d8916a3f5fb47247a

  • Size

    408KB

  • Sample

    231231-cgzjvsbdgj

  • MD5

    23c8ee12c7e7269d8916a3f5fb47247a

  • SHA1

    42ce6816420fcd03a1b60a10947f0dcad120ad91

  • SHA256

    04a52e80435493eafbca0c65d0489c5de8f34f4a6dba800e2a7901dabbb2650d

  • SHA512

    06752929a57401670b0952dc93d5bb5948aa46c27c762f2c7f828adeda5a61aa43774a93ecdfde89a76f885a5afbf8532e3eab59370f1e5e4071364d84b722cd

  • SSDEEP

    12288:mhx9AzWa1HkSApRP9vbXuHuhYdK6Y91W:9Wa1aP9vruHuhYd491W

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      23c8ee12c7e7269d8916a3f5fb47247a

    • Size

      408KB

    • MD5

      23c8ee12c7e7269d8916a3f5fb47247a

    • SHA1

      42ce6816420fcd03a1b60a10947f0dcad120ad91

    • SHA256

      04a52e80435493eafbca0c65d0489c5de8f34f4a6dba800e2a7901dabbb2650d

    • SHA512

      06752929a57401670b0952dc93d5bb5948aa46c27c762f2c7f828adeda5a61aa43774a93ecdfde89a76f885a5afbf8532e3eab59370f1e5e4071364d84b722cd

    • SSDEEP

      12288:mhx9AzWa1HkSApRP9vbXuHuhYdK6Y91W:9Wa1aP9vruHuhYd491W

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks