f2b6c5daad2e47e2c454824fb5b59e5f1bd904afc5477a72688c83189fc28202 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Idiot.exe
Size

105KB
Sample

240424-xsswnsff48
MD5

6ff1c43f5ab6eb7aeea6b88c6fafb15f
SHA1

664ec72841420b71584b3a1a65fdf77cb19a5062
SHA256

f2b6c5daad2e47e2c454824fb5b59e5f1bd904afc5477a72688c83189fc28202
SHA512

4c6a7a98c50a3ba7f5849186bb38823dd8d3e9c881e908a2bff67f2ba88b82e9123934ba109256143bec6b320ff7dfb3763b793f84be2ccf149e016fe8635e85
SSDEEP

3072:L7DhdC6kzWypvaQ0FxyNTBfJpEcI3A3zow:LBlkZvaF4NTBRpEcgWd

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  Idiot.exe
- Size
  
  105KB
- MD5
  
  6ff1c43f5ab6eb7aeea6b88c6fafb15f
- SHA1
  
  664ec72841420b71584b3a1a65fdf77cb19a5062
- SHA256
  
  f2b6c5daad2e47e2c454824fb5b59e5f1bd904afc5477a72688c83189fc28202
- SHA512
  
  4c6a7a98c50a3ba7f5849186bb38823dd8d3e9c881e908a2bff67f2ba88b82e9123934ba109256143bec6b320ff7dfb3763b793f84be2ccf149e016fe8635e85
- SSDEEP
  
  3072:L7DhdC6kzWypvaQ0FxyNTBfJpEcI3A3zow:LBlkZvaF4NTBRpEcgWd
Score

10^/10

evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Disables Task Manager via registry modification
  evasion
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1