4c0103c745fa6e173821035c304863d751bea9c073d19070d9ebf8685da95040 | Triage

Sharing

General

Target

4c0103c745fa6e173821035c304863d751bea9c073d19070d9ebf8685da95040
Size

141KB
Sample

220712-jx7zhahccp
MD5

77067974a70af43a3cadf88219d1e28c
SHA1

7aa8fd4d0e0f44a4ed37f8542f7a1b0bc9faa58c
SHA256

4c0103c745fa6e173821035c304863d751bea9c073d19070d9ebf8685da95040
SHA512

9872bcfd51d5e05d17ad23410326744c13d6d757a998867043a906475cde22daa0ab523bedbf430b8e48043c340e382c74978089ecf0e39cd56d4797b60cc09d

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  4c0103c745fa6e173821035c304863d751bea9c073d19070d9ebf8685da95040
- Size
  
  141KB
- MD5
  
  77067974a70af43a3cadf88219d1e28c
- SHA1
  
  7aa8fd4d0e0f44a4ed37f8542f7a1b0bc9faa58c
- SHA256
  
  4c0103c745fa6e173821035c304863d751bea9c073d19070d9ebf8685da95040
- SHA512
  
  9872bcfd51d5e05d17ad23410326744c13d6d757a998867043a906475cde22daa0ab523bedbf430b8e48043c340e382c74978089ecf0e39cd56d4797b60cc09d
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2