6920baddbd71594adf102fc00682ff4bbbdeaca50ad1b405a1db00982fe641cd | Triage

Sharing

General

Target

6920baddbd71594adf102fc00682ff4bbbdeaca50ad1b405a1db00982fe641cd
Size

121KB
Sample

230608-ft4k5ach8x
MD5

ff74cc73204c0f61244c50de24e8b92f
SHA1

92744117d976b538f80b1c80cfbd55cae8a1dc03
SHA256

6920baddbd71594adf102fc00682ff4bbbdeaca50ad1b405a1db00982fe641cd
SHA512

15e9838fa720668142e5b28fa1cb300a5c1c307639a1023f47ab9f8d7e8e393220963c6f37ee2b25c38be87d162b5c00713cd50acbe27b593d27d699a3afbb04
SSDEEP

3072:J9QLdsON8xxwaTq29L/LM38yLfWvr8oyhuWVFrag1shbfrtvxO:/QLvN8VT838pWVFmZhzrt0

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  6920baddbd71594adf102fc00682ff4bbbdeaca50ad1b405a1db00982fe641cd
- Size
  
  121KB
- MD5
  
  ff74cc73204c0f61244c50de24e8b92f
- SHA1
  
  92744117d976b538f80b1c80cfbd55cae8a1dc03
- SHA256
  
  6920baddbd71594adf102fc00682ff4bbbdeaca50ad1b405a1db00982fe641cd
- SHA512
  
  15e9838fa720668142e5b28fa1cb300a5c1c307639a1023f47ab9f8d7e8e393220963c6f37ee2b25c38be87d162b5c00713cd50acbe27b593d27d699a3afbb04
- SSDEEP
  
  3072:J9QLdsON8xxwaTq29L/LM38yLfWvr8oyhuWVFrag1shbfrtvxO:/QLvN8VT838pWVFmZhzrt0
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1