2aae2375a8cf31575ea9a80bdeddc9ec97586e156e4d0d466d42ffec800ec267 | Triage

Sharing

General

Target

2aae2375a8cf31575ea9a80bdeddc9ec97586e156e4d0d466d42ffec800ec267
Size

385KB
Sample

220615-feq2gshga6
MD5

87844ce0e37030e3575872ba6b4c8ebe
SHA1

747651876b3a6b2824b41932676da1dd3b932044
SHA256

2aae2375a8cf31575ea9a80bdeddc9ec97586e156e4d0d466d42ffec800ec267
SHA512

7c8fa47208d8a1bcb342adfe1aa5e20559f2098bad90e2cd7d23b5120ea4437e5a75306d104de2932cc04ee22031cf1f9dd873c3cbb360872fa1cb3c7c77fde6

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  2aae2375a8cf31575ea9a80bdeddc9ec97586e156e4d0d466d42ffec800ec267
- Size
  
  385KB
- MD5
  
  87844ce0e37030e3575872ba6b4c8ebe
- SHA1
  
  747651876b3a6b2824b41932676da1dd3b932044
- SHA256
  
  2aae2375a8cf31575ea9a80bdeddc9ec97586e156e4d0d466d42ffec800ec267
- SHA512
  
  7c8fa47208d8a1bcb342adfe1aa5e20559f2098bad90e2cd7d23b5120ea4437e5a75306d104de2932cc04ee22031cf1f9dd873c3cbb360872fa1cb3c7c77fde6
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Disabling Security Tools

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan