451ecb371f01bd6558ed692b2ac4f1fc7436ce49db7c0f8038205d2b54509bc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

451ecb371f01bd6558ed692b2ac4f1fc7436ce49db7c0f8038205d2b54509bc8
Size

100KB
Sample

230607-syw33ach31
MD5

e98c9ecf388d7f1e5a1aba0ef4314b8b
SHA1

9f90910b76583fac7218e8a9bea3b13753740f29
SHA256

451ecb371f01bd6558ed692b2ac4f1fc7436ce49db7c0f8038205d2b54509bc8
SHA512

8d4f845c75bafc64a03541ae14fb2d72ee8233668cd273fa4b25da5f6c8578fd426e6595e18b649eeb92c30d20d968ca2681b84a5598f0962143d5158cbb5709
SSDEEP

1536:Xp6kFya9c7Ok/YNQ2gB75eGF2yfjyXX9di2YTHLYjzDm:ZVBQb12yfjyHxYTHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  451ecb371f01bd6558ed692b2ac4f1fc7436ce49db7c0f8038205d2b54509bc8
- Size
  
  100KB
- MD5
  
  e98c9ecf388d7f1e5a1aba0ef4314b8b
- SHA1
  
  9f90910b76583fac7218e8a9bea3b13753740f29
- SHA256
  
  451ecb371f01bd6558ed692b2ac4f1fc7436ce49db7c0f8038205d2b54509bc8
- SHA512
  
  8d4f845c75bafc64a03541ae14fb2d72ee8233668cd273fa4b25da5f6c8578fd426e6595e18b649eeb92c30d20d968ca2681b84a5598f0962143d5158cbb5709
- SSDEEP
  
  1536:Xp6kFya9c7Ok/YNQ2gB75eGF2yfjyXX9di2YTHLYjzDm:ZVBQb12yfjyHxYTHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1