af0ea3e0a73f84b53eb6f926785963acaeb22bfdf987602b40f84588db4de79b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af0ea3e0a73f84b53eb6f926785963acaeb22bfdf987602b40f84588db4de79b
Size

100KB
Sample

230607-vfd6msdg8z
MD5

6d6a3807decf18077ec7bec4d8384191
SHA1

7de0aad49ff2cb0e121fa40985f8dad614bf1afb
SHA256

af0ea3e0a73f84b53eb6f926785963acaeb22bfdf987602b40f84588db4de79b
SHA512

3c6e4341b4bd8d746aa607e1bc02e270ecf4e1ae0639952c00e7da2f171e69e6b5b82e1ac2973097ce84f1ac62ba29e0d8eaf20464e68e4b1b1b32445e655917
SSDEEP

1536:Ap6kFya9c7Ok/YNQKZgB75eGFbC/jyXX9di2YTHLYjzDm:4VBQK21bC/jyHxYTHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  af0ea3e0a73f84b53eb6f926785963acaeb22bfdf987602b40f84588db4de79b
- Size
  
  100KB
- MD5
  
  6d6a3807decf18077ec7bec4d8384191
- SHA1
  
  7de0aad49ff2cb0e121fa40985f8dad614bf1afb
- SHA256
  
  af0ea3e0a73f84b53eb6f926785963acaeb22bfdf987602b40f84588db4de79b
- SHA512
  
  3c6e4341b4bd8d746aa607e1bc02e270ecf4e1ae0639952c00e7da2f171e69e6b5b82e1ac2973097ce84f1ac62ba29e0d8eaf20464e68e4b1b1b32445e655917
- SSDEEP
  
  1536:Ap6kFya9c7Ok/YNQKZgB75eGFbC/jyXX9di2YTHLYjzDm:4VBQK21bC/jyHxYTHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1