85e298829e2066317a1967c554a7b882b245588eae75e39908b80114746517e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85e298829e2066317a1967c554a7b882b245588eae75e39908b80114746517e6
Size

147KB
Sample

230608-qrlyeagd6x
MD5

2aff7283b84e2a9f047ffe648d2c8e0a
SHA1

d5f6b26af47f5b89906f023303af950122b4f8a6
SHA256

85e298829e2066317a1967c554a7b882b245588eae75e39908b80114746517e6
SHA512

3133597d234730d57f445a21831d52acbef92990843269769d15a83456b7d23f474e29b8df135f7d5e4cc64aff2196fa21cb4263b3b997bc192d7b0969ca3687
SSDEEP

3072:BJJIeZKvcG7P6gnuGuOB8lrufBAyhuWVFrag1btpPsx:BJiecZP9nJiWVFmKtpP

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  85e298829e2066317a1967c554a7b882b245588eae75e39908b80114746517e6
- Size
  
  147KB
- MD5
  
  2aff7283b84e2a9f047ffe648d2c8e0a
- SHA1
  
  d5f6b26af47f5b89906f023303af950122b4f8a6
- SHA256
  
  85e298829e2066317a1967c554a7b882b245588eae75e39908b80114746517e6
- SHA512
  
  3133597d234730d57f445a21831d52acbef92990843269769d15a83456b7d23f474e29b8df135f7d5e4cc64aff2196fa21cb4263b3b997bc192d7b0969ca3687
- SSDEEP
  
  3072:BJJIeZKvcG7P6gnuGuOB8lrufBAyhuWVFrag1btpPsx:BJiecZP9nJiWVFmKtpP
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1