General
- Target 4c013d85147a87dac4ff92cffa6fd725f5fbe92c3f45beb427b5822b8f395a33
- Size 1.1MB
- Sample260805-3g9ypstvft
- SHA256 4c013d85147a87dac4ff92cffa6fd725f5fbe92c3f45beb427b5822b8f395a33
- MD5 fbd0778429982da4a28580c2a32e6cde
- SHA1 817477972b0b519c5e991321b1fd795689924083
- SHA512 97901907e9eb23d29607b8904c007ad3b860de0576375bbc96bd9bf749d6b80f533cbad02a23a277c027e98f845fe64c9880d3e167c0012a8da6b3ad1a3e230d
- SSDEEP 12288:l49urElyc6Dcx5PMUX1r+HdXbNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dNgq:ourEoc6DcLEdXz2D
- TLSH T17935A324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4c013d85147a87dac4ff92cffa6fd725f5fbe92c3f45beb427b5822b8f395a33.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4c013d85147a87dac4ff92cffa6fd725f5fbe92c3f45beb427b5822b8f395a33.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 4c013d85147a87dac4ff92cffa6fd725f5fbe92c3f45beb427b5822b8f395a33
- Size 1.1MB
- SHA256 4c013d85147a87dac4ff92cffa6fd725f5fbe92c3f45beb427b5822b8f395a33
- MD5 fbd0778429982da4a28580c2a32e6cde
- SHA1 817477972b0b519c5e991321b1fd795689924083
- SHA512 97901907e9eb23d29607b8904c007ad3b860de0576375bbc96bd9bf749d6b80f533cbad02a23a277c027e98f845fe64c9880d3e167c0012a8da6b3ad1a3e230d
- SSDEEP 12288:l49urElyc6Dcx5PMUX1r+HdXbNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dNgq:ourEoc6DcLEdXz2D
- TLSH T17935A324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification