General
- Target ac51546006f6829a41f1b7a3916cf7707a9f080fbb7169c856000482bc8f3661
- Size 1.0MB
- Sample260803-y1cebsxcma
- SHA256 ac51546006f6829a41f1b7a3916cf7707a9f080fbb7169c856000482bc8f3661
- MD5 422c0882be302af9b4d576cf18b43d43
- SHA1 ca236b223ab50626e77dfd5b3ddbd476a58d9349
- SHA512 f19639f1114c68664f51655fc1c909c666e733822c9f47119a8388d72d78605b0637312b2e76b06e32a41cbae90b600645901f729e9e7174c23cfff1e548f881
- SSDEEP 12288:QrW9wNLrvq1jDZezO3TGjhkkFNjNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dh:QewNLrvq1jDwbjfFNmQ
- TLSH T1C225A324B9BA412DD037FFB83EDDF49EEDAB3A151544A46B0141034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ac51546006f6829a41f1b7a3916cf7707a9f080fbb7169c856000482bc8f3661.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ac51546006f6829a41f1b7a3916cf7707a9f080fbb7169c856000482bc8f3661.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target ac51546006f6829a41f1b7a3916cf7707a9f080fbb7169c856000482bc8f3661
- Size 1.0MB
- SHA256 ac51546006f6829a41f1b7a3916cf7707a9f080fbb7169c856000482bc8f3661
- MD5 422c0882be302af9b4d576cf18b43d43
- SHA1 ca236b223ab50626e77dfd5b3ddbd476a58d9349
- SHA512 f19639f1114c68664f51655fc1c909c666e733822c9f47119a8388d72d78605b0637312b2e76b06e32a41cbae90b600645901f729e9e7174c23cfff1e548f881
- SSDEEP 12288:QrW9wNLrvq1jDZezO3TGjhkkFNjNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dh:QewNLrvq1jDwbjfFNmQ
- TLSH T1C225A324B9BA412DD037FFB83EDDF49EEDAB3A151544A46B0141034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification