90f169a13d65a87b54ed8de6814891fd8337adbd0d5cca0b475d0d59fec40225 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90f169a13d65a87b54ed8de6814891fd8337adbd0d5cca0b475d0d59fec40225
Size

121KB
Sample

230607-1qz4ragh4v
MD5

cd6ec348ffc8aa8f118b89740dc037e9
SHA1

ccc2db80f65dd73eba2127806aa60e01728f0c4a
SHA256

90f169a13d65a87b54ed8de6814891fd8337adbd0d5cca0b475d0d59fec40225
SHA512

01beef6354016aa86da4eaf2827cd8c65b201c9de032cd9fc7e77e19fb1be51b81b3cd4db780fe7eccffbbc6e357f7881cdd3d61d6775b6b71247111a902021f
SSDEEP

3072:69QLdsON8xxwaTq29L1ajtoIOwLfWvo8oyhuWVFrag1shbirtvx:8QLvN8VTp0OSWVFmZhGrt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  90f169a13d65a87b54ed8de6814891fd8337adbd0d5cca0b475d0d59fec40225
- Size
  
  121KB
- MD5
  
  cd6ec348ffc8aa8f118b89740dc037e9
- SHA1
  
  ccc2db80f65dd73eba2127806aa60e01728f0c4a
- SHA256
  
  90f169a13d65a87b54ed8de6814891fd8337adbd0d5cca0b475d0d59fec40225
- SHA512
  
  01beef6354016aa86da4eaf2827cd8c65b201c9de032cd9fc7e77e19fb1be51b81b3cd4db780fe7eccffbbc6e357f7881cdd3d61d6775b6b71247111a902021f
- SSDEEP
  
  3072:69QLdsON8xxwaTq29L1ajtoIOwLfWvo8oyhuWVFrag1shbirtvx:8QLvN8VTp0OSWVFmZhGrt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1