General
- Target 4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014
- Size 314KB
- Sample260804-ylcfsawzhx
- SHA256 4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014
- MD5 6234660228e57745898d2942b845fa45
- SHA1 e27025befa7310d276e389477135b1186cbc3aab
- SHA512 6dd4d43b69eff38a60b4ddf2927e712cb02f3d09e9aa5b9f1b9c398ae7c33a9f87847f37b5c563e93d8f81d2ff4b4e59743c627e49c67b64ef2617063d8a6653
- SSDEEP 6144:b1xO4J48tQi41t5O+IJZVMszVaCqZoRi35v44qmJXDKPdxtJ2y1/J86rF:bTO/8tQt75U7VMaUoRixJOZJT/J/rF
- TLSH T18E6423AA29DEF552F6C88D748944ABC27C729C410F430BEA15DC50BB2DB90977A1E31F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014.dll
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014
- Size 314KB
- SHA256 4b75e07bed02dc725b9ca05c523045b4f33ca75d5cca69702face42fe399f014
- MD5 6234660228e57745898d2942b845fa45
- SHA1 e27025befa7310d276e389477135b1186cbc3aab
- SHA512 6dd4d43b69eff38a60b4ddf2927e712cb02f3d09e9aa5b9f1b9c398ae7c33a9f87847f37b5c563e93d8f81d2ff4b4e59743c627e49c67b64ef2617063d8a6653
- SSDEEP 6144:b1xO4J48tQi41t5O+IJZVMszVaCqZoRi35v44qmJXDKPdxtJ2y1/J86rF:bTO/8tQt75U7VMaUoRixJOZJT/J/rF
- TLSH T18E6423AA29DEF552F6C88D748944ABC27C729C410F430BEA15DC50BB2DB90977A1E31F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification