da2ef1d565496f9bf86119ad7816b2a7f4e1fcb8fecbcd316b1265b8c83f49ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da2ef1d565496f9bf86119ad7816b2a7f4e1fcb8fecbcd316b1265b8c83f49ad
Size

12KB
Sample

230608-b29d5aae22
MD5

171a473b1a2b87de84556eb27b8807eb
SHA1

41c238134cb46b6de44df1dbb69d3065d93ae564
SHA256

da2ef1d565496f9bf86119ad7816b2a7f4e1fcb8fecbcd316b1265b8c83f49ad
SHA512

d26eb465de5797deced0c24d7b6120b91f40df2403b95ba279768a0de6a25593c9243b63d06747ecbd63f0b65a78d674e685698e97df14487e5198cac01efa39
SSDEEP

96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  da2ef1d565496f9bf86119ad7816b2a7f4e1fcb8fecbcd316b1265b8c83f49ad
- Size
  
  12KB
- MD5
  
  171a473b1a2b87de84556eb27b8807eb
- SHA1
  
  41c238134cb46b6de44df1dbb69d3065d93ae564
- SHA256
  
  da2ef1d565496f9bf86119ad7816b2a7f4e1fcb8fecbcd316b1265b8c83f49ad
- SHA512
  
  d26eb465de5797deced0c24d7b6120b91f40df2403b95ba279768a0de6a25593c9243b63d06747ecbd63f0b65a78d674e685698e97df14487e5198cac01efa39
- SSDEEP
  
  96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1