19b030e293a658f9588825f60ab4cb24b6e27d80a4587a0600cc65bcf10458e2 | Triage

Sharing

General

Target

19b030e293a658f9588825f60ab4cb24b6e27d80a4587a0600cc65bcf10458e2
Size

558KB
Sample

220608-gf4veaffg5
MD5

0f8c6e70d2847d8b77e33b67da163170
SHA1

d9b9965cf6d6615b3195000a6b6c26e324227bed
SHA256

19b030e293a658f9588825f60ab4cb24b6e27d80a4587a0600cc65bcf10458e2
SHA512

ebf0721ff989f62acf3550668fd9e8376a1eb4edeadc8d1b26a4755f3abc13dcf6a20c80fed3c382cc5d88c39d4a0396d61978430bb99a6bd36d3cda84232d3a

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  19b030e293a658f9588825f60ab4cb24b6e27d80a4587a0600cc65bcf10458e2
- Size
  
  558KB
- MD5
  
  0f8c6e70d2847d8b77e33b67da163170
- SHA1
  
  d9b9965cf6d6615b3195000a6b6c26e324227bed
- SHA256
  
  19b030e293a658f9588825f60ab4cb24b6e27d80a4587a0600cc65bcf10458e2
- SHA512
  
  ebf0721ff989f62acf3550668fd9e8376a1eb4edeadc8d1b26a4755f3abc13dcf6a20c80fed3c382cc5d88c39d4a0396d61978430bb99a6bd36d3cda84232d3a
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Disabling Security Tools

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2