54c1f31b4346eac890f322d9f09efa685ef4a1f4cb1eddbb675824b4449d42a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54c1f31b4346eac890f322d9f09efa685ef4a1f4cb1eddbb675824b4449d42a4
Size

100KB
Sample

230607-xca1xseh71
MD5

9912a1f89aa505a1b2a2de916ecf6a91
SHA1

a918c05e80bbb58a53797c57312ea09d74afedfb
SHA256

54c1f31b4346eac890f322d9f09efa685ef4a1f4cb1eddbb675824b4449d42a4
SHA512

5679f4689ba4dbabfc51515643897a29cde08d2a189983d828151ece75db5798c8d84fd6979118ac0f70f53ce3a5eba70c4cd6ef1f7b224f6ab60e80ba729a4f
SSDEEP

1536:op6kFya9c7Ok/YNQwgB75eGF2O3zjyXX9di2YTHLYjzDm:wVBQh12O3zjyHxYTHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  54c1f31b4346eac890f322d9f09efa685ef4a1f4cb1eddbb675824b4449d42a4
- Size
  
  100KB
- MD5
  
  9912a1f89aa505a1b2a2de916ecf6a91
- SHA1
  
  a918c05e80bbb58a53797c57312ea09d74afedfb
- SHA256
  
  54c1f31b4346eac890f322d9f09efa685ef4a1f4cb1eddbb675824b4449d42a4
- SHA512
  
  5679f4689ba4dbabfc51515643897a29cde08d2a189983d828151ece75db5798c8d84fd6979118ac0f70f53ce3a5eba70c4cd6ef1f7b224f6ab60e80ba729a4f
- SSDEEP
  
  1536:op6kFya9c7Ok/YNQwgB75eGF2O3zjyXX9di2YTHLYjzDm:wVBQh12O3zjyHxYTHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1