e38cfe132158fb26de95b367811bca48d0c9ba22318bda33084363fa6e4637bc | Triage

Sharing

General

Target

NEAS.NEASNEASe38cfe132158fb26de95b367811bca48d0c9ba22318bda33084363fa6e4637bcexeexeexe_JC.exe
Size

1.4MB
Sample

231013-w3jv3sfa87
MD5

4b45423fa806ba12d099173f6b4126f0
SHA1

86b3f3ed6db3b6dd024359cff9f684d7f7d32903
SHA256

e38cfe132158fb26de95b367811bca48d0c9ba22318bda33084363fa6e4637bc
SHA512

deb0c606169094f47f386f66f41a76011e7ed3710d50d5bd682437054ac1e8a671fa36d0d5e79d50d2debc2b3b104fcdf0831054a40b7b555a30c54e44188a8b
SSDEEP

24576:1yi2HBkN0hhWOga7AeHidUXuVVN8mwpKfLTBHBf/WA7hO/f6abYEsYT:QzHs2hW+AeJu+Kj1B2nmE9

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  NEAS.NEASNEASe38cfe132158fb26de95b367811bca48d0c9ba22318bda33084363fa6e4637bcexeexeexe_JC.exe
- Size
  
  1.4MB
- MD5
  
  4b45423fa806ba12d099173f6b4126f0
- SHA1
  
  86b3f3ed6db3b6dd024359cff9f684d7f7d32903
- SHA256
  
  e38cfe132158fb26de95b367811bca48d0c9ba22318bda33084363fa6e4637bc
- SHA512
  
  deb0c606169094f47f386f66f41a76011e7ed3710d50d5bd682437054ac1e8a671fa36d0d5e79d50d2debc2b3b104fcdf0831054a40b7b555a30c54e44188a8b
- SSDEEP
  
  24576:1yi2HBkN0hhWOga7AeHidUXuVVN8mwpKfLTBHBf/WA7hO/f6abYEsYT:QzHs2hW+AeJu+Kj1B2nmE9
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2