Overview

overview

10

Static

static

3

6795196e75...30.exe

windows7-x64

10

6795196e75...30.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6795196e75a680786678c8abb0828e30

  • Size

    384KB

  • Sample

    240119-n97lqaeag8

  • MD5

    6795196e75a680786678c8abb0828e30

  • SHA1

    17e3f56f702cedd7e765f15b05f9d094e598ab3c

  • SHA256

    09d761fc29f49c45258ff5414170376ec0680b622e5cc3e651b7357a425d9ac0

  • SHA512

    0745081b0c3c917d05b32c077d7e7265291296d28829871d29bbff8dd1833bb99f49041e16e9ffef50b753afe381f4842622d2a809b0b0243201beeff589f65a

  • SSDEEP

    6144:JEjt5w5jvQ6PhxTvPWKsbqpEOiWqRZA2uf95XEkF5iZjVIWYuEexyEWb1DjEgXTP:JE55w5DQItOjEfiWMJc9ik4tYuXxyEEB

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      6795196e75a680786678c8abb0828e30

    • Size

      384KB

    • MD5

      6795196e75a680786678c8abb0828e30

    • SHA1

      17e3f56f702cedd7e765f15b05f9d094e598ab3c

    • SHA256

      09d761fc29f49c45258ff5414170376ec0680b622e5cc3e651b7357a425d9ac0

    • SHA512

      0745081b0c3c917d05b32c077d7e7265291296d28829871d29bbff8dd1833bb99f49041e16e9ffef50b753afe381f4842622d2a809b0b0243201beeff589f65a

    • SSDEEP

      6144:JEjt5w5jvQ6PhxTvPWKsbqpEOiWqRZA2uf95XEkF5iZjVIWYuEexyEWb1DjEgXTP:JE55w5DQItOjEfiWMJc9ik4tYuXxyEEB

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks