General
- Target 664043a9dd075103bf9eb1334a7b0c1912a9faa464c0dfef04ed9a295ce2c217
- Size 1013KB
- Sample260804-yl39hadk5y
- SHA256 664043a9dd075103bf9eb1334a7b0c1912a9faa464c0dfef04ed9a295ce2c217
- MD5 2835a3d43e5ad8dd4784b3ce54a48f2c
- SHA1 14ae5036dddace58e5fb3b374de725943eae23e1
- SHA512 9a2260ae64f456b55f31a709f8254289b2c9f8b26577a07c6123df5807b35e252fb303781e17ca78d57b4df08cf1ce3ca2a4d79b622b922d3529adfb20e6ed33
- SSDEEP 12288:AS6htbLZMYuocUOf+T8ufiRtDDXsmed1uMNzUzv3IgNaSWYdU4881GNT0Qkb3Nnm:AS6jbLZML9fZzMcB
- TLSH T1BA258228B9FA4129D037FFB82EDDE49EDCEB36151545A46B0082034B8A27AD0CF5767D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
664043a9dd075103bf9eb1334a7b0c1912a9faa464c0dfef04ed9a295ce2c217.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
664043a9dd075103bf9eb1334a7b0c1912a9faa464c0dfef04ed9a295ce2c217.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 664043a9dd075103bf9eb1334a7b0c1912a9faa464c0dfef04ed9a295ce2c217
- Size 1013KB
- SHA256 664043a9dd075103bf9eb1334a7b0c1912a9faa464c0dfef04ed9a295ce2c217
- MD5 2835a3d43e5ad8dd4784b3ce54a48f2c
- SHA1 14ae5036dddace58e5fb3b374de725943eae23e1
- SHA512 9a2260ae64f456b55f31a709f8254289b2c9f8b26577a07c6123df5807b35e252fb303781e17ca78d57b4df08cf1ce3ca2a4d79b622b922d3529adfb20e6ed33
- SSDEEP 12288:AS6htbLZMYuocUOf+T8ufiRtDDXsmed1uMNzUzv3IgNaSWYdU4881GNT0Qkb3Nnm:AS6jbLZML9fZzMcB
- TLSH T1BA258228B9FA4129D037FFB82EDDE49EDCEB36151545A46B0082034B8A27AD0CF5767D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification