758af3c720b838dc4dcb41447e50a1d3afa6924c6ecb7ae464f071cba3c3bc33 | Triage

Sharing

General

Target

758af3c720b838dc4dcb41447e50a1d3afa6924c6ecb7ae464f071cba3c3bc33
Size

1.4MB
Sample

231012-f7298aaa5t
MD5

b6daf4ca90ccd7fd0ba8523729f3c74b
SHA1

ae6c51ef395e07e4e1fa553977a76951b607e6e8
SHA256

758af3c720b838dc4dcb41447e50a1d3afa6924c6ecb7ae464f071cba3c3bc33
SHA512

ab918d4ca14897abcc5209d83eab9e39bd9d3931c16006a19339b5bf4f1260921e77aafabcdb901cdcc2bb2a46e5b62d170cd7b7bd6f65f0ae94a6bbaaea1504
SSDEEP

24576:4yaSuqqZ5oOtg7rnoiyp0OjuBiUJn0FEd5/kjDa+kRkjoHAUhGpgciifDza9hX8+:/aSu9Z25roFCOyBzJ4A5/kjDfkooHgpe

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  758af3c720b838dc4dcb41447e50a1d3afa6924c6ecb7ae464f071cba3c3bc33
- Size
  
  1.4MB
- MD5
  
  b6daf4ca90ccd7fd0ba8523729f3c74b
- SHA1
  
  ae6c51ef395e07e4e1fa553977a76951b607e6e8
- SHA256
  
  758af3c720b838dc4dcb41447e50a1d3afa6924c6ecb7ae464f071cba3c3bc33
- SHA512
  
  ab918d4ca14897abcc5209d83eab9e39bd9d3931c16006a19339b5bf4f1260921e77aafabcdb901cdcc2bb2a46e5b62d170cd7b7bd6f65f0ae94a6bbaaea1504
- SSDEEP
  
  24576:4yaSuqqZ5oOtg7rnoiyp0OjuBiUJn0FEd5/kjDa+kRkjoHAUhGpgciifDza9hX8+:/aSu9Z25roFCOyBzJ4A5/kjDfkooHgpe
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan