2ce4f81d27d7546777e15fbc9aa43fccfb11e7999c117da3c2473d38609db563 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e1525ffd32483cfc0f5e28d97ee9c7b19315acea9aa9380fd8f40002c232788.zip
Size

117KB
Sample

230508-nehn4sac98
MD5

ae01469140db5c53f33858a47b65d24f
SHA1

f100f1487fd15a14564315f5e9f743823eefbae2
SHA256

2ce4f81d27d7546777e15fbc9aa43fccfb11e7999c117da3c2473d38609db563
SHA512

5f3fb10d105ee30f3bd2d7b9abc60177dc7eb0f435350c2a97137f2266e811606c52c4eedb8dae090bd00194e0f3e806118167d6149a161f956bf0fb0819aa39
SSDEEP

3072:XPri0ovnMl5AFLAKsiYvfRjGE/nbsQ8Xe4Lvyv4oKJx:XPG0SnMl8DsVkmbsB9Lvh/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  1e1525ffd32483cfc0f5e28d97ee9c7b19315acea9aa9380fd8f40002c232788
- Size
  
  176KB
- MD5
  
  2a02442fd8f21c08686be998a7399412
- SHA1
  
  aa19bce0ae14dd95847421aaed4db0e50f134b28
- SHA256
  
  1e1525ffd32483cfc0f5e28d97ee9c7b19315acea9aa9380fd8f40002c232788
- SHA512
  
  713ab1b145ce6fa3a0313aa776bc50565c9a4ffaf2976023aefd99614a6b7e3e4c6b3abf89187c3377f4dea0efcde5402118b8e9b87dd0af61f2973bf073beb1
- SSDEEP
  
  3072:pDKW1LgppLRHMY0TBfJvjcTp5XZpa8nqeo7Qbeues6Y:pDKW1Lgbdl0TBBvjc/S81Sues
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2