6268b3cd8b7fe598a3db6c94a956712d1344c5d04e0619aae223a62af5e53d6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6268b3cd8b7fe598a3db6c94a956712d1344c5d04e0619aae223a62af5e53d6d
Size

100KB
Sample

230607-sknjrsca59
MD5

627162d8d2fb6a486b9fbe64a051bd3a
SHA1

2e4b316cdfdfb47d88507410b9499f39c4e7de34
SHA256

6268b3cd8b7fe598a3db6c94a956712d1344c5d04e0619aae223a62af5e53d6d
SHA512

994fc7e32957294999b6cab7c7d3269066aba2103f610a949e2fc2938483f931c3aa7f7f78c9f54e428503ba83db83b4b5421fbdf945053bf51942441a86beac
SSDEEP

1536:Pp6kFya9c7Ok/YNQShgB75eGFZyvjyXX9di2YTHLYjzDm:BVBQl1ZyvjyHxYTHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  6268b3cd8b7fe598a3db6c94a956712d1344c5d04e0619aae223a62af5e53d6d
- Size
  
  100KB
- MD5
  
  627162d8d2fb6a486b9fbe64a051bd3a
- SHA1
  
  2e4b316cdfdfb47d88507410b9499f39c4e7de34
- SHA256
  
  6268b3cd8b7fe598a3db6c94a956712d1344c5d04e0619aae223a62af5e53d6d
- SHA512
  
  994fc7e32957294999b6cab7c7d3269066aba2103f610a949e2fc2938483f931c3aa7f7f78c9f54e428503ba83db83b4b5421fbdf945053bf51942441a86beac
- SSDEEP
  
  1536:Pp6kFya9c7Ok/YNQShgB75eGFZyvjyXX9di2YTHLYjzDm:BVBQl1ZyvjyHxYTHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1