General
- Target 54979f4010188ccc06ec4f009423f21f1a5e724080e36cb572a023ac493f17bd
- Size 1.1MB
- Sample260711-phmb5sb13z
- SHA256 54979f4010188ccc06ec4f009423f21f1a5e724080e36cb572a023ac493f17bd
- MD5 331e815d675e42f48add99456acdeb2c
- SHA1 cf08fe629916db2d3d11dee694e5509d6cf8f692
- SHA512 61af0168c2011b9b2a1034485885a9e98921e768ada1aa21a235b1eac7d71ad6c7062151093de18976793a7d2a0307425d1f7e833d09dbbe388101700b55f424
- SSDEEP 12288:jgyrmJ/4MeDcG/mMlCPeZ41m8dNgtHhNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+Sg:8yKJ/4MeDPQm45hs
- TLSH T127358324B9BA812DD037FFB83DDDF49EEDAB3A161544646B0141034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
54979f4010188ccc06ec4f009423f21f1a5e724080e36cb572a023ac493f17bd.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
54979f4010188ccc06ec4f009423f21f1a5e724080e36cb572a023ac493f17bd.dll
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 54979f4010188ccc06ec4f009423f21f1a5e724080e36cb572a023ac493f17bd
- Size 1.1MB
- SHA256 54979f4010188ccc06ec4f009423f21f1a5e724080e36cb572a023ac493f17bd
- MD5 331e815d675e42f48add99456acdeb2c
- SHA1 cf08fe629916db2d3d11dee694e5509d6cf8f692
- SHA512 61af0168c2011b9b2a1034485885a9e98921e768ada1aa21a235b1eac7d71ad6c7062151093de18976793a7d2a0307425d1f7e833d09dbbe388101700b55f424
- SSDEEP 12288:jgyrmJ/4MeDcG/mMlCPeZ41m8dNgtHhNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+Sg:8yKJ/4MeDPQm45hs
- TLSH T127358324B9BA812DD037FFB83DDDF49EEDAB3A161544646B0141034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification