Overview

overview

10

Static

static

3

c0cdd0a020...c8.exe

windows7-x64

10

c0cdd0a020...c8.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0cdd0a02017a1fad7fe6d3c781fa6c8

  • Size

    393KB

  • Sample

    240311-rnalmsgh74

  • MD5

    c0cdd0a02017a1fad7fe6d3c781fa6c8

  • SHA1

    b8aab170cf1c85664cb3f96ebb9eee14c58b7058

  • SHA256

    80f78a20e50943c588dcaccd217eee8f33af377f796c01e199accc87dabd8084

  • SHA512

    ad5207a6a143e7fee4700f8ae50ca5df78bd43781ce2801464c457ab9a36cf61d487fdd8174c737f66488b4977f3988884bdd4f77a93dc8fa95bea07a1b457db

  • SSDEEP

    12288:jqg7dUmmLen1G6Lkjr7plWzuDRsVqGUzu:Og7dkenE6Qf7fpuV

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      c0cdd0a02017a1fad7fe6d3c781fa6c8

    • Size

      393KB

    • MD5

      c0cdd0a02017a1fad7fe6d3c781fa6c8

    • SHA1

      b8aab170cf1c85664cb3f96ebb9eee14c58b7058

    • SHA256

      80f78a20e50943c588dcaccd217eee8f33af377f796c01e199accc87dabd8084

    • SHA512

      ad5207a6a143e7fee4700f8ae50ca5df78bd43781ce2801464c457ab9a36cf61d487fdd8174c737f66488b4977f3988884bdd4f77a93dc8fa95bea07a1b457db

    • SSDEEP

      12288:jqg7dUmmLen1G6Lkjr7plWzuDRsVqGUzu:Og7dkenE6Qf7fpuV

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks