8eb231ddc457ff66ad5a8e4f423af2f70d5dd4674241441a7d877f62ded672bc | Triage

Sharing

General

Target

850424155ee3fed9a770016828d6bef4da87c1e2c3c8ad7394586d71a466a2f2
Size

233KB
Sample

230131-nb4r6sga83
MD5

8b9cf301de63a987602af311c2ffea1a
SHA1

8bb518765a8a3d95ce4206081288358a3bad68b7
SHA256

8eb231ddc457ff66ad5a8e4f423af2f70d5dd4674241441a7d877f62ded672bc
SHA512

97583552dad022532cf94d8b6d2f48839bb62299fd44d394e8a719311cf2958fe36d6d34cd60106333707331b26f12ac6b595f1c7dd6a0146f0dc8637c33710c
SSDEEP

3072:NqVaoobPIIjOYWYXOvqfcQJ32mrnE0wIdL4TjT1YaDLVPhodKmx3GFDEH1Qx1ttR:gocaOURHBrnEc4b1rodKTGmzjm5OdV

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  850424155ee3fed9a770016828d6bef4da87c1e2c3c8ad7394586d71a466a2f2
- Size
  
  336KB
- MD5
  
  110ee23ed5d355cca58da5103d7ba8f8
- SHA1
  
  55e378149c8ae678f9a95530c92e2ca9c8bc3076
- SHA256
  
  850424155ee3fed9a770016828d6bef4da87c1e2c3c8ad7394586d71a466a2f2
- SHA512
  
  7f57fee41c15a43f8aef27d97977142c304655a5e546bb9f9c0e4b1db18a0cec40209ad4dc3b97f0aecf5a559b3213ffeea99b2472d87c6a97fe7cc64edc9848
- SSDEEP
  
  3072:Gtu81hZLpL7R4cR+KRlXOvqfcQJ32srnE2wIdL4TjhTulJ7f43H7BFB1FX8KRCDf:DwhZLpucci1RHxrnE24M77f4Vr8C
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2