cfafcfbeecdd8d3f08044d89aeaeba45e4abb3ad72d57b70e7f6fd5c3ddb3608 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfafcfbeecdd8d3f08044d89aeaeba45e4abb3ad72d57b70e7f6fd5c3ddb3608
Size

100KB
Sample

230607-t19mlsde2s
MD5

09f78fe4e34da7a5cc269c9276b71734
SHA1

511a64592554c4ae664c09eeb12b5eefda7a9fba
SHA256

cfafcfbeecdd8d3f08044d89aeaeba45e4abb3ad72d57b70e7f6fd5c3ddb3608
SHA512

7d8f5c52ffed5fefac31adf9e3b6932348c3d1f29d279616d56bbfcf058fb77cdacd2e30e73c8fb92926eb6a6bb9ff990ab85d845e5646fb604f46a8a04d9401
SSDEEP

1536:vp6kFya9c7Ok/YNQVB0gB75eGFESDjyXX9di2YTHLYjzDm:hVBQ3d1ESDjyHxYTHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  cfafcfbeecdd8d3f08044d89aeaeba45e4abb3ad72d57b70e7f6fd5c3ddb3608
- Size
  
  100KB
- MD5
  
  09f78fe4e34da7a5cc269c9276b71734
- SHA1
  
  511a64592554c4ae664c09eeb12b5eefda7a9fba
- SHA256
  
  cfafcfbeecdd8d3f08044d89aeaeba45e4abb3ad72d57b70e7f6fd5c3ddb3608
- SHA512
  
  7d8f5c52ffed5fefac31adf9e3b6932348c3d1f29d279616d56bbfcf058fb77cdacd2e30e73c8fb92926eb6a6bb9ff990ab85d845e5646fb604f46a8a04d9401
- SSDEEP
  
  1536:vp6kFya9c7Ok/YNQVB0gB75eGFESDjyXX9di2YTHLYjzDm:hVBQ3d1ESDjyHxYTHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1