6caeba5b3bf9f78d0e3dd6dcb628df9988e406212f5671b185224102b870ecc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

k2942044.exe
Size

184KB
Sample

230520-sgqjysfe8z
MD5

0b77769e5cbeb1c7d460322c9cd68467
SHA1

9a877fd27efd0ae246a86e00c6bbba45bcc2eb8a
SHA256

6caeba5b3bf9f78d0e3dd6dcb628df9988e406212f5671b185224102b870ecc7
SHA512

e201b84a9ae5de5af8be6e9edb90cf22c98b0e0698593f245d9e3d56b827d9de0af25d16eb80e619efd60f935812dddbe85afe08bfb70c85fb51043f97fa9ec6
SSDEEP

3072:zDKW1LgppLRHMY0TBfJvjcTp5XFhro49dWbD0GbvTFJ3l+h:zDKW1Lgbdl0TBBvjc/Fe0dWvLH3

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  k2942044.exe
- Size
  
  184KB
- MD5
  
  0b77769e5cbeb1c7d460322c9cd68467
- SHA1
  
  9a877fd27efd0ae246a86e00c6bbba45bcc2eb8a
- SHA256
  
  6caeba5b3bf9f78d0e3dd6dcb628df9988e406212f5671b185224102b870ecc7
- SHA512
  
  e201b84a9ae5de5af8be6e9edb90cf22c98b0e0698593f245d9e3d56b827d9de0af25d16eb80e619efd60f935812dddbe85afe08bfb70c85fb51043f97fa9ec6
- SSDEEP
  
  3072:zDKW1LgppLRHMY0TBfJvjcTp5XFhro49dWbD0GbvTFJ3l+h:zDKW1Lgbdl0TBBvjc/Fe0dWvLH3
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2