ac7a4a45cf17086b98672df546d3b0b605721fc214ebbfa969fc140bda0d39a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac7a4a45cf17086b98672df546d3b0b605721fc214ebbfa969fc140bda0d39a5
Size

1.2MB
Sample

230423-1qlalagb48
MD5

3893f9d339155690fc888c5be1e76d69
SHA1

e4e95e4dd2fc8a5ca7f53b4d3c092ea37fa06084
SHA256

ac7a4a45cf17086b98672df546d3b0b605721fc214ebbfa969fc140bda0d39a5
SHA512

ea98967369840a6b57531ab0d49a3a2c27e3089d5b3c9a9dfe90352c2d7faa13a391b3d317dc7a464c0cd01e4f189ab7f72ea946d00b49043a1b57cd601adf51
SSDEEP

24576:Hu0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:O0+BshUC1VzUjjPP0/

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  ac7a4a45cf17086b98672df546d3b0b605721fc214ebbfa969fc140bda0d39a5
- Size
  
  1.2MB
- MD5
  
  3893f9d339155690fc888c5be1e76d69
- SHA1
  
  e4e95e4dd2fc8a5ca7f53b4d3c092ea37fa06084
- SHA256
  
  ac7a4a45cf17086b98672df546d3b0b605721fc214ebbfa969fc140bda0d39a5
- SHA512
  
  ea98967369840a6b57531ab0d49a3a2c27e3089d5b3c9a9dfe90352c2d7faa13a391b3d317dc7a464c0cd01e4f189ab7f72ea946d00b49043a1b57cd601adf51
- SSDEEP
  
  24576:Hu0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:O0+BshUC1VzUjjPP0/
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan