ff91db089aa87866783bc498cb5ed1f91a36ad6e9975ea8b12e898283411d8cc | Triage

Sharing

General

Target

ff91db089aa87866783bc498cb5ed1f91a36ad6e9975ea8b12e898283411d8cc
Size

121KB
Sample

230608-gl9mvadd2v
MD5

7735ceab7dd25a587ac28e16f7e3a222
SHA1

c1b93833e53af78dfe77577f0364f90400a630a5
SHA256

ff91db089aa87866783bc498cb5ed1f91a36ad6e9975ea8b12e898283411d8cc
SHA512

072392ec966f7410db4b37d41da0f38f87efb32de1f906b341bb670f363d4409b5f63c58f4e077c67cbb36f149e51b0c80883e3ddce5095c23b29bf8e5b1ceb5
SSDEEP

3072:a9QLdsON8xxwaTq29L026eLfWv48oyhuWVFrag1shbfrtvx:cQLvN8VT/6AWVFmZhDrt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  ff91db089aa87866783bc498cb5ed1f91a36ad6e9975ea8b12e898283411d8cc
- Size
  
  121KB
- MD5
  
  7735ceab7dd25a587ac28e16f7e3a222
- SHA1
  
  c1b93833e53af78dfe77577f0364f90400a630a5
- SHA256
  
  ff91db089aa87866783bc498cb5ed1f91a36ad6e9975ea8b12e898283411d8cc
- SHA512
  
  072392ec966f7410db4b37d41da0f38f87efb32de1f906b341bb670f363d4409b5f63c58f4e077c67cbb36f149e51b0c80883e3ddce5095c23b29bf8e5b1ceb5
- SSDEEP
  
  3072:a9QLdsON8xxwaTq29L026eLfWv48oyhuWVFrag1shbfrtvx:cQLvN8VT/6AWVFmZhDrt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Disabling Security Tools

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1