8bf0bc532e197aedac1019c10b6ba18b324f4807a7a3456c7d29136445b857c8 | Triage

Sharing

General

Target

8bf0bc532e197aedac1019c10b6ba18b324f4807a7a3456c7d29136445b857c8
Size

102KB
Sample

230607-rap46sbd38
MD5

d6d059dd0bf631273b76f1f976a59ce6
SHA1

0fc17ee9f1a921c8add10b82abf32d2048fe0a35
SHA256

8bf0bc532e197aedac1019c10b6ba18b324f4807a7a3456c7d29136445b857c8
SHA512

257a37d1f396a148abc05fcf27f14766cd55d9424b7cb926e0a042666677656e61c693962719e924dacbd3a2b7920b03021b8c31331d3a166a8e457250d51015
SSDEEP

1536:ifp6kE69sL+kPINN+gB75eGFiqp525ynX9di2YDHLYjzDm:AVht1iS5iy3xYDHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  8bf0bc532e197aedac1019c10b6ba18b324f4807a7a3456c7d29136445b857c8
- Size
  
  102KB
- MD5
  
  d6d059dd0bf631273b76f1f976a59ce6
- SHA1
  
  0fc17ee9f1a921c8add10b82abf32d2048fe0a35
- SHA256
  
  8bf0bc532e197aedac1019c10b6ba18b324f4807a7a3456c7d29136445b857c8
- SHA512
  
  257a37d1f396a148abc05fcf27f14766cd55d9424b7cb926e0a042666677656e61c693962719e924dacbd3a2b7920b03021b8c31331d3a166a8e457250d51015
- SSDEEP
  
  1536:ifp6kE69sL+kPINN+gB75eGFiqp525ynX9di2YDHLYjzDm:AVht1iS5iy3xYDHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1