General
- Target 677be95825346cae080c802e8fde5d0285cbc0246d219f87b2747187d488a405
- Size 1.1MB
- Sample260804-ysnsdsyerb
- SHA256 677be95825346cae080c802e8fde5d0285cbc0246d219f87b2747187d488a405
- MD5 7e706ec78bf86869d93770cdac3384bb
- SHA1 f0272e13c0546da8bdb6c54b907ee11af9fc821c
- SHA512 03404e3c8c0928e99316336f5c6e743914d9693551088faf95ae35508600b40957a1e21b8e2fbbb095ee4ea455ce0f0b9ef5099677f6d9f6269d34fe8ed43c63
- SSDEEP 12288:W9ACpACkQUmD+j7GsPjltUewEvzRNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8X:1COCjUmDQNW3AzX2X
- TLSH T186359324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
677be95825346cae080c802e8fde5d0285cbc0246d219f87b2747187d488a405.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
677be95825346cae080c802e8fde5d0285cbc0246d219f87b2747187d488a405.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 677be95825346cae080c802e8fde5d0285cbc0246d219f87b2747187d488a405
- Size 1.1MB
- SHA256 677be95825346cae080c802e8fde5d0285cbc0246d219f87b2747187d488a405
- MD5 7e706ec78bf86869d93770cdac3384bb
- SHA1 f0272e13c0546da8bdb6c54b907ee11af9fc821c
- SHA512 03404e3c8c0928e99316336f5c6e743914d9693551088faf95ae35508600b40957a1e21b8e2fbbb095ee4ea455ce0f0b9ef5099677f6d9f6269d34fe8ed43c63
- SSDEEP 12288:W9ACpACkQUmD+j7GsPjltUewEvzRNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8X:1COCjUmDQNW3AzX2X
- TLSH T186359324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification