Overview

overview

8

Static

static

3

dd96bad77a...69.exe

windows7-x64

8

dd96bad77a...69.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd96bad77aff830a8692a4a5f9d19869

  • Size

    266KB

  • Sample

    240325-kmkxnaed6v

  • MD5

    dd96bad77aff830a8692a4a5f9d19869

  • SHA1

    02d9ad6c05dec4a95aa8495edb2f3af012080c57

  • SHA256

    3f772bf8c62e654c0df39d5b8285ff0746e85d81966f426a1192c55222614048

  • SHA512

    e7cb7e5bede3859da1dea86cc307fc10a01a0b81fa5d55f61107410880b42b82308a0f97b3004363411c7255b8f24c2f0e15119f5a9ca72153c4348f2f66146d

  • SSDEEP

    6144:Zu1jS+dG5DlwSsjF4yzMFYczBB77uOpaTz3ilTqt:UeBiCyzJcz3HpaT

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      dd96bad77aff830a8692a4a5f9d19869

    • Size

      266KB

    • MD5

      dd96bad77aff830a8692a4a5f9d19869

    • SHA1

      02d9ad6c05dec4a95aa8495edb2f3af012080c57

    • SHA256

      3f772bf8c62e654c0df39d5b8285ff0746e85d81966f426a1192c55222614048

    • SHA512

      e7cb7e5bede3859da1dea86cc307fc10a01a0b81fa5d55f61107410880b42b82308a0f97b3004363411c7255b8f24c2f0e15119f5a9ca72153c4348f2f66146d

    • SSDEEP

      6144:Zu1jS+dG5DlwSsjF4yzMFYczBB77uOpaTz3ilTqt:UeBiCyzJcz3HpaT

    Score
    8/10
    evasionpersistence

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks