Overview

overview

10

Static

static

10

1b2f9fa043...50.exe

windows7-x64

8

1b2f9fa043...50.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b2f9fa04325bb6db66652a9f293ed99bfac1ab7044556e87c76122453722f50

  • Size

    204KB

  • Sample

    240523-x13e3sdb86

  • MD5

    bf733e2a9a21c4fa287de6e7b22faed0

  • SHA1

    fb337d0a881bcf0856b3f506e24177376355651e

  • SHA256

    1b2f9fa04325bb6db66652a9f293ed99bfac1ab7044556e87c76122453722f50

  • SHA512

    4d3f6a7d130393697b63ce8c4cf9e784b7e322dda11e271f5466d4e8c14378498057f4a5cfd0c7791a8407bc44d08f65286d70e345a81d9d47a7ce2b2acef3cb

  • SSDEEP

    3072:QN73y7S0WrVK0qKNsdxcQ5xvzozZzjz7zUQ7tNdG:QV3y7S/5PQ5xOrdG

Score
10/10
blackmoonevasionpersistence

Malware Config

Targets

    • Target

      1b2f9fa04325bb6db66652a9f293ed99bfac1ab7044556e87c76122453722f50

    • Size

      204KB

    • MD5

      bf733e2a9a21c4fa287de6e7b22faed0

    • SHA1

      fb337d0a881bcf0856b3f506e24177376355651e

    • SHA256

      1b2f9fa04325bb6db66652a9f293ed99bfac1ab7044556e87c76122453722f50

    • SHA512

      4d3f6a7d130393697b63ce8c4cf9e784b7e322dda11e271f5466d4e8c14378498057f4a5cfd0c7791a8407bc44d08f65286d70e345a81d9d47a7ce2b2acef3cb

    • SSDEEP

      3072:QN73y7S0WrVK0qKNsdxcQ5xvzozZzjz7zUQ7tNdG:QV3y7S/5PQ5xOrdG

    Score
    8/10
    evasionpersistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks