General
- Target a56c46952e3c0bb4d8037bd48eb778be230d143d1a340c20c5c0e9b3c57583fa
- Size 1.0MB
- Sample260804-ysff1sdl81
- SHA256 a56c46952e3c0bb4d8037bd48eb778be230d143d1a340c20c5c0e9b3c57583fa
- MD5 874bc512fb9f178c7aea3d7149c939f0
- SHA1 8e59029e9a8ae49255dad5694b0511ca5c350f2d
- SHA512 69f24217aec62b29d16b7e13254a274cbf8c497d4e0b96bb82fcadd3b8702ac0e955608ee753ed6cfd12a2f49e7dced8dc53940f571bfbf2d61743dcb9673cab
- SSDEEP 12288:QSxxrh0klMNZOx9E2L6aDapm8dNgtHhNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+SU:Qixrh0klMr722KHk5h
- TLSH T10E357224B9BA812DD037FFB83EDDF49EDDAB36151545A46B0081034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a56c46952e3c0bb4d8037bd48eb778be230d143d1a340c20c5c0e9b3c57583fa.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a56c46952e3c0bb4d8037bd48eb778be230d143d1a340c20c5c0e9b3c57583fa.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target a56c46952e3c0bb4d8037bd48eb778be230d143d1a340c20c5c0e9b3c57583fa
- Size 1.0MB
- SHA256 a56c46952e3c0bb4d8037bd48eb778be230d143d1a340c20c5c0e9b3c57583fa
- MD5 874bc512fb9f178c7aea3d7149c939f0
- SHA1 8e59029e9a8ae49255dad5694b0511ca5c350f2d
- SHA512 69f24217aec62b29d16b7e13254a274cbf8c497d4e0b96bb82fcadd3b8702ac0e955608ee753ed6cfd12a2f49e7dced8dc53940f571bfbf2d61743dcb9673cab
- SSDEEP 12288:QSxxrh0klMNZOx9E2L6aDapm8dNgtHhNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+SU:Qixrh0klMr722KHk5h
- TLSH T10E357224B9BA812DD037FFB83EDDF49EDDAB36151545A46B0081034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification