General

  • Target

    05794199.exe

  • Size

    100KB

  • Sample

    230607-vbvb3adb23

  • MD5

    5f4765e98aa5789553b5a804d5481467

  • SHA1

    b29085603ae0a545d6125228e8650f6fd6ab3329

  • SHA256

    e4e718731452d373404a47c27f1f8daa757a646a213dc9c482774b22868fb0d6

  • SHA512

    0e8fcbf08b15d9e042600badb86fe379a5ccc78475315a3d87c9c5a40fb38ba642dc33db64975bec46ef52ede24e8a381df89c2759002103225e1fb7aea1b8b6

  • SSDEEP

    1536:vp6kFya9c7Ok/YNQVB0gB75eGFESDjyXX9di2YTHLYjzDm:hVBQ3d1ESDjyHxYTHcj/

Score
10/10

Malware Config

Targets

    • Target

      05794199.exe

    • Size

      100KB

    • MD5

      5f4765e98aa5789553b5a804d5481467

    • SHA1

      b29085603ae0a545d6125228e8650f6fd6ab3329

    • SHA256

      e4e718731452d373404a47c27f1f8daa757a646a213dc9c482774b22868fb0d6

    • SHA512

      0e8fcbf08b15d9e042600badb86fe379a5ccc78475315a3d87c9c5a40fb38ba642dc33db64975bec46ef52ede24e8a381df89c2759002103225e1fb7aea1b8b6

    • SSDEEP

      1536:vp6kFya9c7Ok/YNQVB0gB75eGFESDjyXX9di2YTHLYjzDm:hVBQ3d1ESDjyHxYTHcj/

    Score
    10/10
    • Modifies Windows Defender Real-time Protection settings

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks