Overview

overview

10

Static

static

3

409116c7ea...d9.exe

windows7-x64

10

409116c7ea...d9.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    409116c7ea0c8c22c16cde01ae61ebd9

  • Size

    468KB

  • Sample

    240104-l35sfadcel

  • MD5

    409116c7ea0c8c22c16cde01ae61ebd9

  • SHA1

    6ec7a40283602638248a491c4262126d2328cc57

  • SHA256

    37aef29f23ee6f26ad33747ade611b3e58d352fe2774302c1c40381a885922c3

  • SHA512

    8d2e77c01fa6f99db799db16a8fe05be3caf6cb5819f154f09c0589d9e5046d326387e810a36f529d324da777dd975169cf9430b6be9c039e4ec0447deff280b

  • SSDEEP

    12288:9VgOXPmOe3pcGcLWEmc+CENxyFKhF9gQA8:M7OqpdkmiF2PgQ

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      409116c7ea0c8c22c16cde01ae61ebd9

    • Size

      468KB

    • MD5

      409116c7ea0c8c22c16cde01ae61ebd9

    • SHA1

      6ec7a40283602638248a491c4262126d2328cc57

    • SHA256

      37aef29f23ee6f26ad33747ade611b3e58d352fe2774302c1c40381a885922c3

    • SHA512

      8d2e77c01fa6f99db799db16a8fe05be3caf6cb5819f154f09c0589d9e5046d326387e810a36f529d324da777dd975169cf9430b6be9c039e4ec0447deff280b

    • SSDEEP

      12288:9VgOXPmOe3pcGcLWEmc+CENxyFKhF9gQA8:M7OqpdkmiF2PgQ

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks