e97b1e5eaa3e7bc4904a04619bcf68d593c843165e8e8dc574673b354f8b2744 | Triage

Sharing

General

Target

e97b1e5eaa3e7bc4904a04619bcf68d593c843165e8e8dc574673b354f8b2744N.exe
Size

393KB
Sample

250212-pjgs2s1lh1
MD5

96ed8f4b642cab95be106ff4961c78b0
SHA1

46d3cb9e4c9fb2dafa02505e8390942d365a619d
SHA256

e97b1e5eaa3e7bc4904a04619bcf68d593c843165e8e8dc574673b354f8b2744
SHA512

764958ed0ead61136f5e65aecd5fd0aec0ed96f38f819c0da446fd9702ecb4daa63692fe2f315d351cb13d8381b30eb6b9bbb02eaf686e9ee63a84569a1be2b8
SSDEEP

6144:gOYpQUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7OK88:g3QvULyjQorymC/aWYuosit3ZaOK8Un

Score

10^/10

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  
  e97b1e5eaa3e7bc4904a04619bcf68d593c843165e8e8dc574673b354f8b2744N.exe
- Size
  
  393KB
- MD5
  
  96ed8f4b642cab95be106ff4961c78b0
- SHA1
  
  46d3cb9e4c9fb2dafa02505e8390942d365a619d
- SHA256
  
  e97b1e5eaa3e7bc4904a04619bcf68d593c843165e8e8dc574673b354f8b2744
- SHA512
  
  764958ed0ead61136f5e65aecd5fd0aec0ed96f38f819c0da446fd9702ecb4daa63692fe2f315d351cb13d8381b30eb6b9bbb02eaf686e9ee63a84569a1be2b8
- SSDEEP
  
  6144:gOYpQUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7OK88:g3QvULyjQorymC/aWYuosit3ZaOK8Un
Score

10^/10

defense_evasion discovery persistence trojan
- Windows security bypass
  defense_evasion trojan
- Disables taskbar notifications via registry modification
  defense_evasion
- Downloads MZ/PE file
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  defense_evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2