ee8716d803ab7e04ded051d640e117a5eabb8d1b4abf13ace934230ab95767eb | Triage

Sharing

General

Target

pr365317.exe
Size

404KB
Sample

230417-fndshsda83
MD5

ff1651445bebe2328583ea8d2e9c00fa
SHA1

310e4bcef99fcf9812cd850e074bcf924d2acb71
SHA256

ee8716d803ab7e04ded051d640e117a5eabb8d1b4abf13ace934230ab95767eb
SHA512

9be9a9a93e171abe6b4cd6bccb70dfe213577e6b76a9201774571a50e47e2094093657700e004ee602a01a73cea608269a64ecc1dae25a6452acddcd4cc93765
SSDEEP

6144:JcYbxbuMGsxAHqkXgVJLZ8TpJ44JyI4QtNLbiasVD8Kd2:JcgxKMXxAHqbVJuTpJ44JtNLbY18

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  pr365317.exe
- Size
  
  404KB
- MD5
  
  ff1651445bebe2328583ea8d2e9c00fa
- SHA1
  
  310e4bcef99fcf9812cd850e074bcf924d2acb71
- SHA256
  
  ee8716d803ab7e04ded051d640e117a5eabb8d1b4abf13ace934230ab95767eb
- SHA512
  
  9be9a9a93e171abe6b4cd6bccb70dfe213577e6b76a9201774571a50e47e2094093657700e004ee602a01a73cea608269a64ecc1dae25a6452acddcd4cc93765
- SSDEEP
  
  6144:JcYbxbuMGsxAHqkXgVJLZ8TpJ44JyI4QtNLbiasVD8Kd2:JcgxKMXxAHqbVJuTpJ44JtNLbY18
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2