286beccfb8b2aafb550bf2c9e33f47af9c5bdaa53be7814f0340ec5dfe585af7 | Triage

Sharing

General

Target

286beccfb8b2aafb550bf2c9e33f47af9c5bdaa53be7814f0340ec5dfe585af7
Size

101KB
Sample

230607-yy9baaga6z
MD5

dee61d6ed4a6d3fd4a61fa86bd3c3da2
SHA1

3a84f9e4f648215bc466ca02495a2b4c282fe46f
SHA256

286beccfb8b2aafb550bf2c9e33f47af9c5bdaa53be7814f0340ec5dfe585af7
SHA512

2fbdec3e1d272e0490f6c8cfca64e1b891c5478112228be2ea1ece7000de374b3a63bca93a4773771725f7095429520cc715f9e3adbf7a255bb678464de1fd9f
SSDEEP

1536:Rp6kFya9c7Ok/YNQmdgB75eGFKiTjyXX9di2YTHLYjzDm:bVBQmy1KiTjyHxYTHcj/

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  286beccfb8b2aafb550bf2c9e33f47af9c5bdaa53be7814f0340ec5dfe585af7
- Size
  
  101KB
- MD5
  
  dee61d6ed4a6d3fd4a61fa86bd3c3da2
- SHA1
  
  3a84f9e4f648215bc466ca02495a2b4c282fe46f
- SHA256
  
  286beccfb8b2aafb550bf2c9e33f47af9c5bdaa53be7814f0340ec5dfe585af7
- SHA512
  
  2fbdec3e1d272e0490f6c8cfca64e1b891c5478112228be2ea1ece7000de374b3a63bca93a4773771725f7095429520cc715f9e3adbf7a255bb678464de1fd9f
- SSDEEP
  
  1536:Rp6kFya9c7Ok/YNQmdgB75eGFKiTjyXX9di2YTHLYjzDm:bVBQmy1KiTjyHxYTHcj/
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1