General
- Target f08af553a6cfc18c4200099b6466962ee2498cc561febdea45cc033a3fac4264
- Size 1.0MB
- Sample260703-nc13nscy7k
- SHA256 f08af553a6cfc18c4200099b6466962ee2498cc561febdea45cc033a3fac4264
- MD5 ed5a3e8a3b38b9cbc24a9bb5f6c69617
- SHA1 51be9c2f599b31385504e1769b035fedd42be9df
- SHA512 aff84aef4f0b7dc6663305c72f064bf5de34054afdd4e36822ec7d24a014cd59a0121dba5374494389f6008d41cee8aabd687da443db6198c6252b1d562dd94b
- SSDEEP 12288:MxTfutNRyXMIyEQ485Ytnzrt9yHgm8dNgtHhNzUzv3IgNaSWYdU4881GNT0Qkb3a:GfutNRyXM/5zYtzpAH9
- TLSH T105257124B9BA412DD037FFB82EDDF49EECAB36151545A46B0081034B8A27AD0CF5B67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f08af553a6cfc18c4200099b6466962ee2498cc561febdea45cc033a3fac4264.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
f08af553a6cfc18c4200099b6466962ee2498cc561febdea45cc033a3fac4264.dll
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f08af553a6cfc18c4200099b6466962ee2498cc561febdea45cc033a3fac4264
- Size 1.0MB
- SHA256 f08af553a6cfc18c4200099b6466962ee2498cc561febdea45cc033a3fac4264
- MD5 ed5a3e8a3b38b9cbc24a9bb5f6c69617
- SHA1 51be9c2f599b31385504e1769b035fedd42be9df
- SHA512 aff84aef4f0b7dc6663305c72f064bf5de34054afdd4e36822ec7d24a014cd59a0121dba5374494389f6008d41cee8aabd687da443db6198c6252b1d562dd94b
- SSDEEP 12288:MxTfutNRyXMIyEQ485Ytnzrt9yHgm8dNgtHhNzUzv3IgNaSWYdU4881GNT0Qkb3a:GfutNRyXM/5zYtzpAH9
- TLSH T105257124B9BA412DD037FFB82EDDF49EECAB36151545A46B0081034B8A27AD0CF5B67D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification