General
- Target 1e22f31fbe22cb34d093f183dac757e81d1972c92c3c186397f0067e4b288200
- Size 1021KB
- Sample260804-ylk3xsdk3s
- SHA256 1e22f31fbe22cb34d093f183dac757e81d1972c92c3c186397f0067e4b288200
Score
10/10
Malware Config
Targets
-
- Target 1e22f31fbe22cb34d093f183dac757e81d1972c92c3c186397f0067e4b288200
- Size 1021KB
- SHA256 1e22f31fbe22cb34d093f183dac757e81d1972c92c3c186397f0067e4b288200
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender TamperProtection settings
-
Modifies Windows Defender notification settings
-
Modifies firewall policy service
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1LSASS Driver
1Create or Modify System Process
4Windows Service
4Privilege Escalation
Boot or Logon Autostart Execution
1LSASS Driver
1Create or Modify System Process
4Windows Service
4