General
- Target SecurityBlocker.exe
- Size 9.0MB
- Sample260604-tzkxvsaz4x
- SHA256 a3b6d68c6d8626065ed6c829040c10b77c48fffee38ae01996eca4674523bab5
Score
10/10
Malware Config
Targets
-
- Target SecurityBlocker.exe
- Size 9.0MB
- SHA256 a3b6d68c6d8626065ed6c829040c10b77c48fffee38ae01996eca4674523bab5
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender TamperProtection settings
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Disables service(s)
-
Loads dropped DLL
-
Stops running service(s)
-
Windows security modification
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1System Services
2Service Execution
2Persistence
Create or Modify System Process
5Windows Service
5Event Triggered Execution
1Netsh Helper DLL
1