52e841cca30acb79c67c9607f5d1f4dc7883703a95cd8e5cb3bbad3bff1b9c29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.88ddb45e2a68acc94603588613979400.exe
Size

890KB
Sample

231031-kvqswach51
MD5

88ddb45e2a68acc94603588613979400
SHA1

b080f5d654c724fab6bea55ab2ffd2d7cd8e8c02
SHA256

52e841cca30acb79c67c9607f5d1f4dc7883703a95cd8e5cb3bbad3bff1b9c29
SHA512

466cfb654165ba1d73b8c380a50b19d63bcbaccc4a06a7553e4d480979d9812666675ac2211063021ca982b39a914901063eb3dc9d166400eedcbc0e6cb6d057
SSDEEP

12288:Z6ygLhJN7zWdgM8/26p6Lb9f77QBGbyFFUpulVhjIhus897tzBTi:LShJlzWdgM8/26p6fOBGbyGOMqt

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  NEAS.88ddb45e2a68acc94603588613979400.exe
- Size
  
  890KB
- MD5
  
  88ddb45e2a68acc94603588613979400
- SHA1
  
  b080f5d654c724fab6bea55ab2ffd2d7cd8e8c02
- SHA256
  
  52e841cca30acb79c67c9607f5d1f4dc7883703a95cd8e5cb3bbad3bff1b9c29
- SHA512
  
  466cfb654165ba1d73b8c380a50b19d63bcbaccc4a06a7553e4d480979d9812666675ac2211063021ca982b39a914901063eb3dc9d166400eedcbc0e6cb6d057
- SSDEEP
  
  12288:Z6ygLhJN7zWdgM8/26p6Lb9f77QBGbyFFUpulVhjIhus897tzBTi:LShJlzWdgM8/26p6fOBGbyGOMqt
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2