0680f3af2daf22fc83c265759ae453f501fd3b56af9d83225ed53c0d67b63a6e | Triage

Sharing

General

Target

k9270212.exe
Size

184KB
Sample

230520-sgqvqafe9s
MD5

f624d1cff774d3852b8424f3bc87bcf8
SHA1

94bf8654b869c2dd2c7cd645f81ace1209d1a7e5
SHA256

0680f3af2daf22fc83c265759ae453f501fd3b56af9d83225ed53c0d67b63a6e
SHA512

7cf7641872502ba5152790c8ed7524dd030d997296cef9758488870a38bb5cf214afbc4551038073f42470b1002aaec35ea02ddd51144c84a328daadbbfd2cb1
SSDEEP

3072:YDKW1LgppLRHMY0TBfJvjcTp5XDZTfZbPHayrB:YDKW1Lgbdl0TBBvjc/Dd

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  k9270212.exe
- Size
  
  184KB
- MD5
  
  f624d1cff774d3852b8424f3bc87bcf8
- SHA1
  
  94bf8654b869c2dd2c7cd645f81ace1209d1a7e5
- SHA256
  
  0680f3af2daf22fc83c265759ae453f501fd3b56af9d83225ed53c0d67b63a6e
- SHA512
  
  7cf7641872502ba5152790c8ed7524dd030d997296cef9758488870a38bb5cf214afbc4551038073f42470b1002aaec35ea02ddd51144c84a328daadbbfd2cb1
- SSDEEP
  
  3072:YDKW1LgppLRHMY0TBfJvjcTp5XDZTfZbPHayrB:YDKW1Lgbdl0TBBvjc/Dd
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2