8a461803e834853e5e4c8f61c7f780ddced8261b96abc63952d4c25ab19c4316 | Triage

Sharing

General

Target

8a461803e834853e5e4c8f61c7f780ddced8261b96abc63952d4c25ab19c4316
Size

100KB
Sample

230607-wfanwsed8v
MD5

907a39bedf6f2fea50f029ebac8db0fc
SHA1

fc8251935317b7c447dd3dbf9b6e4bea2ed2e822
SHA256

8a461803e834853e5e4c8f61c7f780ddced8261b96abc63952d4c25ab19c4316
SHA512

78521863c6ccf8b8d8a33b7ca90423353b36c9eb8658c0121ba71d9214bfdddcc1eb080826d05c00669eb4b2a658aa16d3490e55d78160c9c899300cf1d706d3
SSDEEP

1536:Zp6kFya9c7Ok/YNQcgB75eGF7IrtinjyXX9di2YTHLYjzDm:zVBQl1UrtinjyHxYTHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  8a461803e834853e5e4c8f61c7f780ddced8261b96abc63952d4c25ab19c4316
- Size
  
  100KB
- MD5
  
  907a39bedf6f2fea50f029ebac8db0fc
- SHA1
  
  fc8251935317b7c447dd3dbf9b6e4bea2ed2e822
- SHA256
  
  8a461803e834853e5e4c8f61c7f780ddced8261b96abc63952d4c25ab19c4316
- SHA512
  
  78521863c6ccf8b8d8a33b7ca90423353b36c9eb8658c0121ba71d9214bfdddcc1eb080826d05c00669eb4b2a658aa16d3490e55d78160c9c899300cf1d706d3
- SSDEEP
  
  1536:Zp6kFya9c7Ok/YNQcgB75eGF7IrtinjyXX9di2YTHLYjzDm:zVBQl1UrtinjyHxYTHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1