1717944b9a0d01ef92a47b6d46b94fa140a50658977982a0d65f1d2f5fc7331e | Triage

Sharing

General

Target

1717944b9a0d01ef92a47b6d46b94fa140a50658977982a0d65f1d2f5fc7331e
Size

479KB
Sample

230506-ld45lsgf46
MD5

20b578125004cd9b23a8935e4b088a7b
SHA1

b6741599abfc42d7c99ecb821499f1ab3ae4893e
SHA256

1717944b9a0d01ef92a47b6d46b94fa140a50658977982a0d65f1d2f5fc7331e
SHA512

313718ca494217c2930cbe1adb6e325c8254432cfdf515e4067e7a9c2ee08d5ed56cd85992bcfe9ef8c9516b5d5cae9d8aca9dba3d53b1a03b7ecc5305635e1c
SSDEEP

12288:z2Mr0y90fYnv/F3ltTkXVqrQb0OMw2vvjlDpg1ZY:z2yGY3FVaXQU0Fw6vppgHY

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  1717944b9a0d01ef92a47b6d46b94fa140a50658977982a0d65f1d2f5fc7331e
- Size
  
  479KB
- MD5
  
  20b578125004cd9b23a8935e4b088a7b
- SHA1
  
  b6741599abfc42d7c99ecb821499f1ab3ae4893e
- SHA256
  
  1717944b9a0d01ef92a47b6d46b94fa140a50658977982a0d65f1d2f5fc7331e
- SHA512
  
  313718ca494217c2930cbe1adb6e325c8254432cfdf515e4067e7a9c2ee08d5ed56cd85992bcfe9ef8c9516b5d5cae9d8aca9dba3d53b1a03b7ecc5305635e1c
- SSDEEP
  
  12288:z2Mr0y90fYnv/F3ltTkXVqrQb0OMw2vvjlDpg1ZY:z2yGY3FVaXQU0Fw6vppgHY
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan