General

  • Target

    0a478c915b4ba2086b09bde6c321cdeb3325404ae5dcfd447ee9afd3d5986d01

  • Size

    121KB

  • Sample

    230608-dhxx4abg9t

  • MD5

    29f9e8ea69a226bb4acf208d2ac12d40

  • SHA1

    93da174c327b3ffc765d5b21bd55b500ea7f47bf

  • SHA256

    0a478c915b4ba2086b09bde6c321cdeb3325404ae5dcfd447ee9afd3d5986d01

  • SHA512

    8b917e929c4b9d478e4e8671988277d61ee4a542535906e51f6bf4aceb40bb1d4e80ee728baf7e96f1dd6fb4ec7c53fc379c8cdbc63483bed2ecc31401e17bf5

  • SSDEEP

    3072:K9QLdsON8xxwaTq29LuQ/PLfWvI8oyhuWVFrag1shburtvx:MQLvN8VTT/xWVFmZhirt

Score
10/10

Malware Config

Targets

    • Target

      0a478c915b4ba2086b09bde6c321cdeb3325404ae5dcfd447ee9afd3d5986d01

    • Size

      121KB

    • MD5

      29f9e8ea69a226bb4acf208d2ac12d40

    • SHA1

      93da174c327b3ffc765d5b21bd55b500ea7f47bf

    • SHA256

      0a478c915b4ba2086b09bde6c321cdeb3325404ae5dcfd447ee9afd3d5986d01

    • SHA512

      8b917e929c4b9d478e4e8671988277d61ee4a542535906e51f6bf4aceb40bb1d4e80ee728baf7e96f1dd6fb4ec7c53fc379c8cdbc63483bed2ecc31401e17bf5

    • SSDEEP

      3072:K9QLdsON8xxwaTq29LuQ/PLfWvI8oyhuWVFrag1shburtvx:MQLvN8VTT/xWVFmZhirt

    Score
    10/10
    • Modifies Windows Defender Real-time Protection settings

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks