03f70b0907e5d671bb40b2096bb6aee5d0d794a6a8cb92e239175f713f8f478e | Triage

Sharing

General

Target

03f70b0907e5d671bb40b2096bb6aee5d0d794a6a8cb92e239175f713f8f478e
Size

479KB
Sample

230505-2n6n7aeh85
MD5

373319478f432e1550549a02618fcb4a
SHA1

cbb24d60ff3e10b4cd12dba0bb9ba0df7b9171d3
SHA256

03f70b0907e5d671bb40b2096bb6aee5d0d794a6a8cb92e239175f713f8f478e
SHA512

cf761d8164741131ee5e78b6070eee2ed5a28fecd19b689df7299b3d65cdd71bd6dc4fae13cd2cc2769c5ebba5eff171b387e753ec303a44b46c63ab8470f7cb
SSDEEP

12288:+MrLy90NwpU7geIVsyC4faWISGYKi6wmuLT:FykqUBIVs/HSG06m

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  03f70b0907e5d671bb40b2096bb6aee5d0d794a6a8cb92e239175f713f8f478e
- Size
  
  479KB
- MD5
  
  373319478f432e1550549a02618fcb4a
- SHA1
  
  cbb24d60ff3e10b4cd12dba0bb9ba0df7b9171d3
- SHA256
  
  03f70b0907e5d671bb40b2096bb6aee5d0d794a6a8cb92e239175f713f8f478e
- SHA512
  
  cf761d8164741131ee5e78b6070eee2ed5a28fecd19b689df7299b3d65cdd71bd6dc4fae13cd2cc2769c5ebba5eff171b387e753ec303a44b46c63ab8470f7cb
- SSDEEP
  
  12288:+MrLy90NwpU7geIVsyC4faWISGYKi6wmuLT:FykqUBIVs/HSG06m
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan