d5787676f37962e17cbdf10e8baecc95fc6aacff8a276833b22960ea7e997b47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5787676f37962e17cbdf10e8baecc95fc6aacff8a276833b22960ea7e997b47
Size

101KB
Sample

230607-ppzwtaah8s
MD5

bdcd76d585e225eda918262f16045841
SHA1

9cd1974f9fbe3ffe2e89bc92627b7472d1702ec7
SHA256

d5787676f37962e17cbdf10e8baecc95fc6aacff8a276833b22960ea7e997b47
SHA512

18352b481a78ad8407c0edbd1731a9eb7eba693972f0463b91a629843b5954e715201ba557c14eeede43f065c758716c6ddd3875b500508d9e805d73241f0ab4
SSDEEP

1536:ifp6kE69sL+kPINN+gB75eGFiqp525ynX9di2YDHLYjzDm:AVht1iS5iy3xYDHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  d5787676f37962e17cbdf10e8baecc95fc6aacff8a276833b22960ea7e997b47
- Size
  
  101KB
- MD5
  
  bdcd76d585e225eda918262f16045841
- SHA1
  
  9cd1974f9fbe3ffe2e89bc92627b7472d1702ec7
- SHA256
  
  d5787676f37962e17cbdf10e8baecc95fc6aacff8a276833b22960ea7e997b47
- SHA512
  
  18352b481a78ad8407c0edbd1731a9eb7eba693972f0463b91a629843b5954e715201ba557c14eeede43f065c758716c6ddd3875b500508d9e805d73241f0ab4
- SSDEEP
  
  1536:ifp6kE69sL+kPINN+gB75eGFiqp525ynX9di2YDHLYjzDm:AVht1iS5iy3xYDHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1