7ee01a4ba6f0e2fb3f2be717e233f85a4556308a6a2cf489849f6cc630bee4c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05522999.exe
Size

11KB
Sample

230607-pbznwsab32
MD5

b0ffe6e119718a6c0bef39c2e32a912b
SHA1

770d12cb4212e9b2aa8acb0b20a1fd67c656ff6f
SHA256

7ee01a4ba6f0e2fb3f2be717e233f85a4556308a6a2cf489849f6cc630bee4c8
SHA512

05ba6baf46f1da8c9ae2b432e5b04aef724f3236285256b64a3111f508efebd5dfb6df7e665ad9944d897a01e47e229fcf6b500e7d4d9b49711d9c2e83b1016a
SSDEEP

96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  05522999.exe
- Size
  
  11KB
- MD5
  
  b0ffe6e119718a6c0bef39c2e32a912b
- SHA1
  
  770d12cb4212e9b2aa8acb0b20a1fd67c656ff6f
- SHA256
  
  7ee01a4ba6f0e2fb3f2be717e233f85a4556308a6a2cf489849f6cc630bee4c8
- SHA512
  
  05ba6baf46f1da8c9ae2b432e5b04aef724f3236285256b64a3111f508efebd5dfb6df7e665ad9944d897a01e47e229fcf6b500e7d4d9b49711d9c2e83b1016a
- SSDEEP
  
  96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2