1606eee4c75ac80ff8ea75d9d3a15c6010d9a759b6d0713232ccbdaa0ca6c69d | Triage

Sharing

General

Target

f4ca53174fe9af954d7a683802474af04ea5ceedd36e7c09e1d526931cddfa6b
Size

233KB
Sample

230131-x2331abf9s
MD5

7a2709a296ad0f48f69b307b5fb1f571
SHA1

978a19276763216850d234c6acd097f23dbc84a9
SHA256

1606eee4c75ac80ff8ea75d9d3a15c6010d9a759b6d0713232ccbdaa0ca6c69d
SHA512

b17dc0fb9cd235fc95cec18f8d69bc1a4a4de6d04956f6dfc37bad8a235a0ca014d21dc9e321aa43451cc15a61592a4b6362a9906154c1ce796101767134bca1
SSDEEP

6144:eQX7w+WHuZ7ZzKcTtW+dqFuSEZ/zHNCC3Eae/jbmRrl6H:jMbHuZdK2tW+dX5Z/ZF0V/jbm1lC

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  f4ca53174fe9af954d7a683802474af04ea5ceedd36e7c09e1d526931cddfa6b
- Size
  
  336KB
- MD5
  
  78e95f347007dc17cec3b1652349edbb
- SHA1
  
  e242e9a74fe720f98afbc49c5f3c0a4e9ca3c39d
- SHA256
  
  f4ca53174fe9af954d7a683802474af04ea5ceedd36e7c09e1d526931cddfa6b
- SHA512
  
  075030d5335d26a09870fea7c17001933ebad1a6c24330501d50a4ca42834ed6812d9c20a2d47417a932b27955a2b5ffe433e3f91542ea4222b3433e6e879572
- SSDEEP
  
  6144:3bpJLaH0ZzKcTFW+dqLuSEZ/Yn97f4VTJZ:rL+4K2FW+dz5Z/Yn9zO
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2