Overview

overview

10

Static

static

SecuriteIn...82.exe

windows7_x64

10

SecuriteIn...82.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.Siggen9.59975.9415.12682

  • Size

    591KB

  • Sample

    200718-d4qqtqj45j

  • MD5

    e5383f9ff78e1af6c83f00f618d027c5

  • SHA1

    e247e980e8fc129025a2e64ad72b4bc163284cca

  • SHA256

    02877c1523986e1fbb50da0a828df2da4aca704d7de19b11c9225e5befbb0572

  • SHA512

    5f2ef98f940f607c04903b3675b662341565a3b0e6805e28b54d5da49bd3a3aac56c7256ee7155523e8943ee45c3f40f4beade3b0306e61295e7fb0106900a47

Score
10/10
evasiontrojan

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.Siggen9.59975.9415.12682

    • Size

      591KB

    • MD5

      e5383f9ff78e1af6c83f00f618d027c5

    • SHA1

      e247e980e8fc129025a2e64ad72b4bc163284cca

    • SHA256

      02877c1523986e1fbb50da0a828df2da4aca704d7de19b11c9225e5befbb0572

    • SHA512

      5f2ef98f940f607c04903b3675b662341565a3b0e6805e28b54d5da49bd3a3aac56c7256ee7155523e8943ee45c3f40f4beade3b0306e61295e7fb0106900a47

    Score
    10/10
    evasiontrojan

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Windows security modification

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks