508588fae75ea0e96d7a3b2a42414f10feef13d49bcb1a5317b7c4c1b86142ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

508588fae75ea0e96d7a3b2a42414f10feef13d49bcb1a5317b7c4c1b86142ea
Size

121KB
Sample

230608-dmfjlsbd23
MD5

6c999d192b9a3a02cfd491640f78a433
SHA1

01d40971240ca55b2716d7b3d1a5abe8d1e5ef82
SHA256

508588fae75ea0e96d7a3b2a42414f10feef13d49bcb1a5317b7c4c1b86142ea
SHA512

a8ff15e81c55ecf6a9d005995f73891d26743d9ba769e65c55682410234e1a3f93f9428ed0fb3dde9c378645bb08fdf8e22cf1071be1c54808fbfd5a8f5ab329
SSDEEP

3072:R9QLdsON8xxwaTq29LDtJq/JLfWvH8oyhuWVFrag1shbzrtvx:nQLvN8VTzq/CWVFmZhHrt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  508588fae75ea0e96d7a3b2a42414f10feef13d49bcb1a5317b7c4c1b86142ea
- Size
  
  121KB
- MD5
  
  6c999d192b9a3a02cfd491640f78a433
- SHA1
  
  01d40971240ca55b2716d7b3d1a5abe8d1e5ef82
- SHA256
  
  508588fae75ea0e96d7a3b2a42414f10feef13d49bcb1a5317b7c4c1b86142ea
- SHA512
  
  a8ff15e81c55ecf6a9d005995f73891d26743d9ba769e65c55682410234e1a3f93f9428ed0fb3dde9c378645bb08fdf8e22cf1071be1c54808fbfd5a8f5ab329
- SSDEEP
  
  3072:R9QLdsON8xxwaTq29LDtJq/JLfWvH8oyhuWVFrag1shbzrtvx:nQLvN8VTzq/CWVFmZhHrt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1