General

  • Target
    Flawless.exe
  • Size 33.5MB
  • Sample260719-nt3mtsat4l
  • SHA256 740555a7c14e4d699e554ff7d42baa1cfba1bdaf7b05452601f75ba542ff5277
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Flawless.exe
    • Size 33.5MB
    • SHA256 740555a7c14e4d699e554ff7d42baa1cfba1bdaf7b05452601f75ba542ff5277
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Disables one or more Microsoft Defender components

      Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.

    • Loads dropped DLL

    • Target
      main.pyc
    • Size 35KB
    • SHA256 35bd8823cdfc89462e74147a0a047fbe0852f45d4f3d1e5b1ef90163270763db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks