e7226d875c80a3c59266d1e180c2dbcd2faec20696d4a9b377fbc3161a472282 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ef4b76e9b86a6fe27abc753c904dae23347ba6d89aee9d951f8043723ac7d52.zip
Size

117KB
Sample

230508-k3mq7ahh59
MD5

349662801767f604eb3a8c05220e2e44
SHA1

24c342d9bdea575fd26bbd6105bcc675eee006fc
SHA256

e7226d875c80a3c59266d1e180c2dbcd2faec20696d4a9b377fbc3161a472282
SHA512

d65519d110ccca8893e76f5e7ca3f9ad7308ab3951b3bc1061a9bbf62f4cb34bc8f83ca29a287310192708a0bfca1fc4ab5d9caf1a1a2709c39e84531bcd0401
SSDEEP

3072:5Pri0ovnMl5AFLAKsiYvfRjGE/nbsQ8Xe4Lvyv4lNSrfHk:5PG0SnMl8DsVkmbsB9LvhOI

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  6ef4b76e9b86a6fe27abc753c904dae23347ba6d89aee9d951f8043723ac7d52
- Size
  
  179KB
- MD5
  
  d6076a346d3a74797717aa513853f396
- SHA1
  
  b5c83522db5086a502dc064e20b551b91b00a8ed
- SHA256
  
  6ef4b76e9b86a6fe27abc753c904dae23347ba6d89aee9d951f8043723ac7d52
- SHA512
  
  78107b4fd687c5f41d6480b1aebcd8b40278795d68d84c41fb32413f96d2c7ca3a0fce7f3726abd52e0b40e83e5fa24a0846e38a82717571ce5b6d4d048a7844
- SSDEEP
  
  3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2