472a57d07a76c5ca434faca4e6dc896859feaa08e58e76fa0a9de0d5992db78b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

472a57d07a76c5ca434faca4e6dc896859feaa08e58e76fa0a9de0d5992db78b
Size

1.4MB
Sample

231104-3wmrqagd7t
MD5

8d999f5ac506200343d887a3a4060947
SHA1

32b114672ad5c5a073df1192fbda2aad867782fd
SHA256

472a57d07a76c5ca434faca4e6dc896859feaa08e58e76fa0a9de0d5992db78b
SHA512

cb58fd769fd0c681e63314a12401f00fa8324677afe8f398e3b651d8ffcb66be8f7d1ac4ff2d4a1a9f6ac4318b774a04110cfb0bfb42db3cba29166c7e6c7c7e
SSDEEP

24576:Ny7c6wUmhUvNEGx6WR69NXDL9HHbejDENLHy34yD4:oFwzhMF8W+/ZHbeW+z

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  472a57d07a76c5ca434faca4e6dc896859feaa08e58e76fa0a9de0d5992db78b
- Size
  
  1.4MB
- MD5
  
  8d999f5ac506200343d887a3a4060947
- SHA1
  
  32b114672ad5c5a073df1192fbda2aad867782fd
- SHA256
  
  472a57d07a76c5ca434faca4e6dc896859feaa08e58e76fa0a9de0d5992db78b
- SHA512
  
  cb58fd769fd0c681e63314a12401f00fa8324677afe8f398e3b651d8ffcb66be8f7d1ac4ff2d4a1a9f6ac4318b774a04110cfb0bfb42db3cba29166c7e6c7c7e
- SSDEEP
  
  24576:Ny7c6wUmhUvNEGx6WR69NXDL9HHbejDENLHy34yD4:oFwzhMF8W+/ZHbeW+z
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan