cb78435a59bce4ce95b469d2647e3b9c4bc4e0cf4edc80919fcd0271640979f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb78435a59bce4ce95b469d2647e3b9c4bc4e0cf4edc80919fcd0271640979f5
Size

987KB
Sample

230303-1hlldsbe76
MD5

1dfce6672c0842f5fcbec852f9c9f929
SHA1

def7e59a83f59456675eea71e253f634ca26057d
SHA256

cb78435a59bce4ce95b469d2647e3b9c4bc4e0cf4edc80919fcd0271640979f5
SHA512

89ac826b168b030d3634f882b6c93401094035e5c41fbe439f696b142eb8566f7d742649f0f4994fd60c512d7dd827ccc2b5911de79d03c5f27e5bd14164b5ad
SSDEEP

24576:fyQEZIVcTW+TV0y5vbjDq4akbGh/gtKy+XNgfuu/v:qXICTnaeHD2k5tKyqNgfR/

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  cb78435a59bce4ce95b469d2647e3b9c4bc4e0cf4edc80919fcd0271640979f5
- Size
  
  987KB
- MD5
  
  1dfce6672c0842f5fcbec852f9c9f929
- SHA1
  
  def7e59a83f59456675eea71e253f634ca26057d
- SHA256
  
  cb78435a59bce4ce95b469d2647e3b9c4bc4e0cf4edc80919fcd0271640979f5
- SHA512
  
  89ac826b168b030d3634f882b6c93401094035e5c41fbe439f696b142eb8566f7d742649f0f4994fd60c512d7dd827ccc2b5911de79d03c5f27e5bd14164b5ad
- SSDEEP
  
  24576:fyQEZIVcTW+TV0y5vbjDq4akbGh/gtKy+XNgfuu/v:qXICTnaeHD2k5tKyqNgfR/
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan