50285bce4facc4891548e7704ebbeb05a496f0514fe50a6e02a9e05e2de1c4cf | Triage

Sharing

General

Target

50285bce4facc4891548e7704ebbeb05a496f0514fe50a6e02a9e05e2de1c4cf
Size

121KB
Sample

230608-e6bv7sca85
MD5

6cfb4d8db80d0b8aaf6821231ae88e89
SHA1

fed3b09c9efc6bd35f87acbaefd93cdb2d609506
SHA256

50285bce4facc4891548e7704ebbeb05a496f0514fe50a6e02a9e05e2de1c4cf
SHA512

76498863450e2d284e4f30cf6d86e7a59b33ae028ae636a8c4a6912e40c424c76a735a12eb2d94f83de9aa4eceec6e21709bae67d16e14e1d36d0a7ebbe440ff
SSDEEP

3072:U9QLdsON8xxwaTq29LzGZZLfWvm8oyhuWVFrag1shb4rtvx:mQLvN8VTGZ1WVFmZhcrt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  50285bce4facc4891548e7704ebbeb05a496f0514fe50a6e02a9e05e2de1c4cf
- Size
  
  121KB
- MD5
  
  6cfb4d8db80d0b8aaf6821231ae88e89
- SHA1
  
  fed3b09c9efc6bd35f87acbaefd93cdb2d609506
- SHA256
  
  50285bce4facc4891548e7704ebbeb05a496f0514fe50a6e02a9e05e2de1c4cf
- SHA512
  
  76498863450e2d284e4f30cf6d86e7a59b33ae028ae636a8c4a6912e40c424c76a735a12eb2d94f83de9aa4eceec6e21709bae67d16e14e1d36d0a7ebbe440ff
- SSDEEP
  
  3072:U9QLdsON8xxwaTq29LzGZZLfWvm8oyhuWVFrag1shb4rtvx:mQLvN8VTGZ1WVFmZhcrt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1