db9c238672376ab4e639986e1e197391ea876c3008f64145112afd477d3a3b25 | Triage

Sharing

General

Target

db9c238672376ab4e639986e1e197391ea876c3008f64145112afd477d3a3b25
Size

121KB
Sample

230608-gk2kvacg57
MD5

77ddcc4411256fb56afa18fc60b8f247
SHA1

5ec3c7b80d2a01e5409d239c4cc99208aec0866c
SHA256

db9c238672376ab4e639986e1e197391ea876c3008f64145112afd477d3a3b25
SHA512

051f0869d47c5018e639dfabb281bd8b285f48fc76e3aa6cce3e12c5d0b69f81a130ad82d7d0c21bc008b63b8618126030dffff02d9b60215c8982c130fe5815
SSDEEP

3072:k9QLdsON8xxwaTq29LyipOpLfWvW8oyhuWVFrag1shb3rtvx:2QLvN8VT5OJWVFmZhzrt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  db9c238672376ab4e639986e1e197391ea876c3008f64145112afd477d3a3b25
- Size
  
  121KB
- MD5
  
  77ddcc4411256fb56afa18fc60b8f247
- SHA1
  
  5ec3c7b80d2a01e5409d239c4cc99208aec0866c
- SHA256
  
  db9c238672376ab4e639986e1e197391ea876c3008f64145112afd477d3a3b25
- SHA512
  
  051f0869d47c5018e639dfabb281bd8b285f48fc76e3aa6cce3e12c5d0b69f81a130ad82d7d0c21bc008b63b8618126030dffff02d9b60215c8982c130fe5815
- SSDEEP
  
  3072:k9QLdsON8xxwaTq29LyipOpLfWvW8oyhuWVFrag1shb3rtvx:2QLvN8VT5OJWVFmZhzrt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Disabling Security Tools

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1