69038468285528b4701fd41f2d0e81a39250384b5cfc11a70037ce8b644e673a | Triage

Sharing

General

Target

69038468285528b4701fd41f2d0e81a39250384b5cfc11a70037ce8b644e673a
Size

121KB
Sample

230608-fjwgrscc63
MD5

14987c199cc34dd665185041685eaf42
SHA1

6688c03bf369d552d967087085de23c7521cbd08
SHA256

69038468285528b4701fd41f2d0e81a39250384b5cfc11a70037ce8b644e673a
SHA512

c4006e8d8542c50d9c988198bd58574ed271c0b884b6174b62d4ced86dd476aef7f19c83f2f2909abe7552573e3edca73134ffa95f26ce83e7750819a2357ff1
SSDEEP

3072:Z9QLdsON8xxwaTq29LhqtXJLfWvv8oyhuWVFrag1shbsrtvx:PQLvN8VTQtXGWVFmZh4rt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  69038468285528b4701fd41f2d0e81a39250384b5cfc11a70037ce8b644e673a
- Size
  
  121KB
- MD5
  
  14987c199cc34dd665185041685eaf42
- SHA1
  
  6688c03bf369d552d967087085de23c7521cbd08
- SHA256
  
  69038468285528b4701fd41f2d0e81a39250384b5cfc11a70037ce8b644e673a
- SHA512
  
  c4006e8d8542c50d9c988198bd58574ed271c0b884b6174b62d4ced86dd476aef7f19c83f2f2909abe7552573e3edca73134ffa95f26ce83e7750819a2357ff1
- SSDEEP
  
  3072:Z9QLdsON8xxwaTq29LhqtXJLfWvv8oyhuWVFrag1shbsrtvx:PQLvN8VTQtXGWVFmZh4rt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1