927beccca9df507c6a0adb274fedbcddd254e4e474133d60eb830d9063ec3421 | Triage

Sharing

General

Target

927beccca9df507c6a0adb274fedbcddd254e4e474133d60eb830d9063ec3421
Size

121KB
Sample

230608-grx61add6t
MD5

3f5d2a4504c15919570e2fc07a154d1a
SHA1

c325407a23ba2b006d0ef333bdc82a9430951cae
SHA256

927beccca9df507c6a0adb274fedbcddd254e4e474133d60eb830d9063ec3421
SHA512

9cd1760a169f1a9858a056f2bd25a33e01312492095e4893e8e09978b8d8afd7594b1aef346df620aca2f07d7c8e73f56d5a36493b495f213e5c92d4b3e9a408
SSDEEP

3072:f9QLdsON8xxwaTq29LJbdYLfWvt8oyhuWVFrag1shbgrtvx:1QLvN8VT1dxWVFmZhsrt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  927beccca9df507c6a0adb274fedbcddd254e4e474133d60eb830d9063ec3421
- Size
  
  121KB
- MD5
  
  3f5d2a4504c15919570e2fc07a154d1a
- SHA1
  
  c325407a23ba2b006d0ef333bdc82a9430951cae
- SHA256
  
  927beccca9df507c6a0adb274fedbcddd254e4e474133d60eb830d9063ec3421
- SHA512
  
  9cd1760a169f1a9858a056f2bd25a33e01312492095e4893e8e09978b8d8afd7594b1aef346df620aca2f07d7c8e73f56d5a36493b495f213e5c92d4b3e9a408
- SSDEEP
  
  3072:f9QLdsON8xxwaTq29LJbdYLfWvt8oyhuWVFrag1shbgrtvx:1QLvN8VT1dxWVFmZhsrt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Disabling Security Tools

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1