22be326e0824aefe50246025e5c8956c3dd87a6f72604e2296b32073343c2a8a | Triage

Sharing

General

Target

22be326e0824aefe50246025e5c8956c3dd87a6f72604e2296b32073343c2a8a
Size

356KB
Sample

230208-jewhrahf44
MD5

5364166bbf9a4d75b5c2d2bc9da97f48
SHA1

eb35ef9348866b02fc53e7965b65bc41e94d67a6
SHA256

22be326e0824aefe50246025e5c8956c3dd87a6f72604e2296b32073343c2a8a
SHA512

8938254d2e1bc7c9e2184fce86a0c9dfb348be28a023e980bfd6fff793a1e90558137fedfb7812c3a60b45cb51b25f3cdedba957573f916751a3e1025e41f72e
SSDEEP

3072:TwWRqVXYEwXR5uChwBBKju4QxL6bMuMts8og2i8QP7hLiVFeQWByUAl1knSySNBX:TvS/UThwBBKju4gazGdu3xWUjFySIu

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  22be326e0824aefe50246025e5c8956c3dd87a6f72604e2296b32073343c2a8a
- Size
  
  356KB
- MD5
  
  5364166bbf9a4d75b5c2d2bc9da97f48
- SHA1
  
  eb35ef9348866b02fc53e7965b65bc41e94d67a6
- SHA256
  
  22be326e0824aefe50246025e5c8956c3dd87a6f72604e2296b32073343c2a8a
- SHA512
  
  8938254d2e1bc7c9e2184fce86a0c9dfb348be28a023e980bfd6fff793a1e90558137fedfb7812c3a60b45cb51b25f3cdedba957573f916751a3e1025e41f72e
- SSDEEP
  
  3072:TwWRqVXYEwXR5uChwBBKju4QxL6bMuMts8og2i8QP7hLiVFeQWByUAl1knSySNBX:TvS/UThwBBKju4gazGdu3xWUjFySIu
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1