22f82d97196d5076691105a1700f405fb9c44f4022a691dd88b8a8629c92ce6f | Triage

Sharing

General

Target

22f82d97196d5076691105a1700f405fb9c44f4022a691dd88b8a8629c92ce6f
Size

1.4MB
Sample

231012-njrsksfe8x
MD5

cb5ca14d472d059569d93e12fb9c63c9
SHA1

231a468296e9b788d97ade1b52a026eae302867e
SHA256

22f82d97196d5076691105a1700f405fb9c44f4022a691dd88b8a8629c92ce6f
SHA512

ca9d957c8442ee81415d77cf4a2210e81a06b127c73a51ad8070dcd173a9714896238074cc10539879d9c062ab4aaaaa793732e8efc5a9fbac26fde168901d82
SSDEEP

24576:pyocDAthasu2QxvUX9+h7HwIiFneBuPjLGo5qxPKozgpkU7p+9l54SYlG6E+k470:cocKhm22vUOH7zejLGooi7pkU7k9lU8q

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  22f82d97196d5076691105a1700f405fb9c44f4022a691dd88b8a8629c92ce6f
- Size
  
  1.4MB
- MD5
  
  cb5ca14d472d059569d93e12fb9c63c9
- SHA1
  
  231a468296e9b788d97ade1b52a026eae302867e
- SHA256
  
  22f82d97196d5076691105a1700f405fb9c44f4022a691dd88b8a8629c92ce6f
- SHA512
  
  ca9d957c8442ee81415d77cf4a2210e81a06b127c73a51ad8070dcd173a9714896238074cc10539879d9c062ab4aaaaa793732e8efc5a9fbac26fde168901d82
- SSDEEP
  
  24576:pyocDAthasu2QxvUX9+h7HwIiFneBuPjLGo5qxPKozgpkU7p+9l54SYlG6E+k470:cocKhm22vUOH7zejLGooi7pkU7k9lU8q
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan