Overview

overview

10

Static

static

3

a278ad70a5...f5.exe

windows7-x64

10

a278ad70a5...f5.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a278ad70a5d8f4066efcadfbe997eef5.exe

  • Size

    404KB

  • Sample

    240107-x3scwscdbq

  • MD5

    a278ad70a5d8f4066efcadfbe997eef5

  • SHA1

    a8c5b0964cd03ee44c6e43d6bb0fd806ec329890

  • SHA256

    0994c279ee900db1f0dc68da4144a9aa64c25220da4577001813181cb3f59b25

  • SHA512

    e47b48e79769deb195693dc4950edcbe3d1323c6ade25b6d60ef495fee59725a970e53ca039003dda69a775d443a4fa03ca09d89e6db60723c2610190c038c62

  • SSDEEP

    12288:bJOP5daVTxtvM0Fb54gCwG7p13NJP5ouzv3:bJOXadxF3Fb9D4L9Jhz

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a278ad70a5d8f4066efcadfbe997eef5.exe

    • Size

      404KB

    • MD5

      a278ad70a5d8f4066efcadfbe997eef5

    • SHA1

      a8c5b0964cd03ee44c6e43d6bb0fd806ec329890

    • SHA256

      0994c279ee900db1f0dc68da4144a9aa64c25220da4577001813181cb3f59b25

    • SHA512

      e47b48e79769deb195693dc4950edcbe3d1323c6ade25b6d60ef495fee59725a970e53ca039003dda69a775d443a4fa03ca09d89e6db60723c2610190c038c62

    • SSDEEP

      12288:bJOP5daVTxtvM0Fb54gCwG7p13NJP5ouzv3:bJOXadxF3Fb9D4L9Jhz

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks