48e48b7fd8c6af1c62aa2adf77ec0b7ae5b2b67252354f491c538a07c41e735e | Triage

Sharing

General

Target

48e48b7fd8c6af1c62aa2adf77ec0b7ae5b2b67252354f491c538a07c41e735e
Size

147KB
Sample

230608-qscq5agd61
MD5

a7485c2eee0e43d92964e9e53349255f
SHA1

a37817c91090684a763d78648bbefefff06a00b6
SHA256

48e48b7fd8c6af1c62aa2adf77ec0b7ae5b2b67252354f491c538a07c41e735e
SHA512

24c6b879e30164cb2469517083800a7220f628de1e67837f63f7e26a27258a544f91a4041d53ac72b76a47eba3072944ba58d1447e96e8bee1f94cf7483532a2
SSDEEP

3072:wJJIeZKvcG7P6gnuGI/8lrusBAyhuWVFrag1btTPsx6:wJiecZP9n9iWVFmKtTP1

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  48e48b7fd8c6af1c62aa2adf77ec0b7ae5b2b67252354f491c538a07c41e735e
- Size
  
  147KB
- MD5
  
  a7485c2eee0e43d92964e9e53349255f
- SHA1
  
  a37817c91090684a763d78648bbefefff06a00b6
- SHA256
  
  48e48b7fd8c6af1c62aa2adf77ec0b7ae5b2b67252354f491c538a07c41e735e
- SHA512
  
  24c6b879e30164cb2469517083800a7220f628de1e67837f63f7e26a27258a544f91a4041d53ac72b76a47eba3072944ba58d1447e96e8bee1f94cf7483532a2
- SSDEEP
  
  3072:wJJIeZKvcG7P6gnuGI/8lrusBAyhuWVFrag1btTPsx6:wJiecZP9n9iWVFmKtTP1
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1