Overview

overview

10

Static

static

3

iphone_pho...82.exe

windows7-x64

10

iphone_pho...82.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b68025a249bd04720540f688c58ba4bd3f6782de8119524eccfb57fcac36d13

  • Size

    69KB

  • Sample

    240410-lhfyksdg7v

  • MD5

    ebf57a1f224d126b227d738ae573d9e0

  • SHA1

    ed49dac7445195a7fa1cda0886159730581e0a0e

  • SHA256

    0b68025a249bd04720540f688c58ba4bd3f6782de8119524eccfb57fcac36d13

  • SHA512

    622f49aad148b993dcda217d2cfbbcde2ace9f4b1babdf849c75d6fa3405d40ff1cd85780757040f8b8ae414a39b5ed2691b1f51ba872887cd53c4434a125399

  • SSDEEP

    1536:CP70WmbW5Hd664hsZW0z4yKoL8J4DWdd68n4VBoOHjUawBcGywTi:U70WxSIZW0cv68J4DWdpneBrjvwfNTi

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      iphone_photo_id_8237489237982.exe

    • Size

      140KB

    • MD5

      8b9aa1589fea77caa7a1b17a3c4617f2

    • SHA1

      a9a22fdf9ed8cd9496da748b97881fadf249243b

    • SHA256

      dc2ade64db04b2da7bd825d842025deae7ebb43419a727435962cb093d4299b6

    • SHA512

      8d0e59d61fae6404de9b75cbb28bfb299df29522536f33da188ab7931a5abc3568e0f8f6e7b72ceddad06020f8de0cf0bdb00609ec44404934ef573d6dd79cc0

    • SSDEEP

      1536:nRnAIQv9JBWd+FZLVZ0pPgS7vTho6lxr0+6Lbd+FeBEG5QsMNZM3tPDoH:6jBWdWZwThoGrNudrBTQHZMVD

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Adds policy Run key to start application

      persistence

    • Disables taskbar notifications via registry modification

      evasion

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks