165a8064798a5537d554410c13911f5bfab2378386da7e1d3791c56195cb8c54 | Triage

Resubmissions

19/04/2023, 00:03

230419-aceyjsfb34 10

18/04/2023, 23:54

230418-3xxcjsfa84 10

Sharing

General

Target

165a8064798a5537d554410c13911f5bfab2378386da7e1d3791c56195cb8c54
Size

1.3MB
Sample

230419-aceyjsfb34
MD5

56bcf63a381be768573ed0e866a2613d
SHA1

2974f5b7b0c3279b1d4496b60694fa0348671269
SHA256

165a8064798a5537d554410c13911f5bfab2378386da7e1d3791c56195cb8c54
SHA512

1422448df87a822d365403aedea49bbabe8239907cab99e34a2d23aef5924629afff152a9eab97f7933dfe44998ee65e2be5284346f13a6e52d515ceb3a66615
SSDEEP

24576:7yytWeQJhSQinRRP3bxGlgOjIVbwYQWVp+Y+Xz2RQkqc8k/I:uyt34SQqRRvbxGlgUBJo3OKRJ8k

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  165a8064798a5537d554410c13911f5bfab2378386da7e1d3791c56195cb8c54
- Size
  
  1.3MB
- MD5
  
  56bcf63a381be768573ed0e866a2613d
- SHA1
  
  2974f5b7b0c3279b1d4496b60694fa0348671269
- SHA256
  
  165a8064798a5537d554410c13911f5bfab2378386da7e1d3791c56195cb8c54
- SHA512
  
  1422448df87a822d365403aedea49bbabe8239907cab99e34a2d23aef5924629afff152a9eab97f7933dfe44998ee65e2be5284346f13a6e52d515ceb3a66615
- SSDEEP
  
  24576:7yytWeQJhSQinRRP3bxGlgOjIVbwYQWVp+Y+Xz2RQkqc8k/I:uyt34SQqRRvbxGlgUBJo3OKRJ8k
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan