63b087a9fa01c00b9f07712fa4c46e461245d5364606dd9dc10130d93415bd6d

Resubmissions

07-05-2024 12:06

240507-n9pqxahf66 10

07-05-2024 12:05

07-05-2024 12:05

07-05-2024 12:05

07-05-2024 12:05

25-04-2024 13:00

Sharing

Copy URL

Twitter E-mail

General

Target

63b087a9fa01c00b9f07712fa4c46e461245d5364606dd9dc10130d93415bd6d
Size

356KB
Sample

240507-n9dnmshf57
MD5

6ffbff0cb624b4965fbea168ec43aea8
SHA1

5be9a3b2238e13e0fa17ada96e4bb53a5b58fd81
SHA256

63b087a9fa01c00b9f07712fa4c46e461245d5364606dd9dc10130d93415bd6d
SHA512

edbcb9de0b4ff80da0debb6c0d8be7198efac3ba5534997396f4461a4b43dd897e09f126e68fe928e7c5f48446583c7ebce7757f4dd72f9bdb19a5e7934a04c0
SSDEEP

6144:LXj4tVpmiFWkppKTXD6x/xai9VJrU+aUh5Px9YKRTw6pPZtM/FSpECb:LXj4tyxMuT6jp9Vvh5PPdZM/0GCb

Score

10^/10

Malware Config

Targets

- Target
  
  63b087a9fa01c00b9f07712fa4c46e461245d5364606dd9dc10130d93415bd6d
- Size
  
  356KB
- MD5
  
  6ffbff0cb624b4965fbea168ec43aea8
- SHA1
  
  5be9a3b2238e13e0fa17ada96e4bb53a5b58fd81
- SHA256
  
  63b087a9fa01c00b9f07712fa4c46e461245d5364606dd9dc10130d93415bd6d
- SHA512
  
  edbcb9de0b4ff80da0debb6c0d8be7198efac3ba5534997396f4461a4b43dd897e09f126e68fe928e7c5f48446583c7ebce7757f4dd72f9bdb19a5e7934a04c0
- SSDEEP
  
  6144:LXj4tVpmiFWkppKTXD6x/xai9VJrU+aUh5Px9YKRTw6pPZtM/FSpECb:LXj4tyxMuT6jp9Vvh5PPdZM/0GCb
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Impair Defenses

T1562

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Windows security bypass

Executes dropped EXE

Loads dropped DLL

Windows security modification

Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5