16757ebeeb82999726bfa692326bc4a30f3a2449056fb08ed3b231a85a5e7b3b | Triage

Sharing

General

Target

16757ebeeb82999726bfa692326bc4a30f3a2449056fb08ed3b231a85a5e7b3b
Size

101KB
Sample

230607-try5hscf93
MD5

a854369acc62acbb15927410522dcfec
SHA1

aec2d0acf0a26ad63d437e482af70c4a1d85eb47
SHA256

16757ebeeb82999726bfa692326bc4a30f3a2449056fb08ed3b231a85a5e7b3b
SHA512

f7df0fd1da100d16c04f20541e6d061fca5ae68075cc03efd60b167c359b81a54b2038309df9e528376898a3e1c57f70a897d80661319ceed3f6199b1c1af399
SSDEEP

1536:rfp6kE69sL+kPINGgB75eGFN3nKp5m5ynX9di2YDHLYjzDm:VVhL1N3ny5yy3xYDHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  16757ebeeb82999726bfa692326bc4a30f3a2449056fb08ed3b231a85a5e7b3b
- Size
  
  101KB
- MD5
  
  a854369acc62acbb15927410522dcfec
- SHA1
  
  aec2d0acf0a26ad63d437e482af70c4a1d85eb47
- SHA256
  
  16757ebeeb82999726bfa692326bc4a30f3a2449056fb08ed3b231a85a5e7b3b
- SHA512
  
  f7df0fd1da100d16c04f20541e6d061fca5ae68075cc03efd60b167c359b81a54b2038309df9e528376898a3e1c57f70a897d80661319ceed3f6199b1c1af399
- SSDEEP
  
  1536:rfp6kE69sL+kPINGgB75eGFN3nKp5m5ynX9di2YDHLYjzDm:VVhL1N3ny5yy3xYDHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1