General
- Target 6c433a2c2d7f153908cbc58cd5a7da8e9aa59a6904fa024f4b89c56ad2c576a7
- Size 1.0MB
- Sample260807-qs7lhaep2w
- SHA256 6c433a2c2d7f153908cbc58cd5a7da8e9aa59a6904fa024f4b89c56ad2c576a7
- MD5 b5624f27bd7fa9d4e2ad0db95936b181
- SHA1 fc3035db71a8cdbe3b90f598d445aeef2dadd72d
- SHA512 b4d575192c8cf5bf287f07fd9c159d879363525da22eaabfe9290ce56dbc0516d6c4923e50e4119403424714c857d388afe4b07c350a861b90e4178aa4b342b2
- SSDEEP 12288:uEEvWNPH5np48A9FjDBmzN3ZgbRDaR8/NzUzv3IgNaSWYdU4881GNT0Qkb3NnX+j:u5WNPH5nG8kFjDU8bMR8sF
- TLSH T134259324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6c433a2c2d7f153908cbc58cd5a7da8e9aa59a6904fa024f4b89c56ad2c576a7.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
6c433a2c2d7f153908cbc58cd5a7da8e9aa59a6904fa024f4b89c56ad2c576a7.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 6c433a2c2d7f153908cbc58cd5a7da8e9aa59a6904fa024f4b89c56ad2c576a7
- Size 1.0MB
- SHA256 6c433a2c2d7f153908cbc58cd5a7da8e9aa59a6904fa024f4b89c56ad2c576a7
- MD5 b5624f27bd7fa9d4e2ad0db95936b181
- SHA1 fc3035db71a8cdbe3b90f598d445aeef2dadd72d
- SHA512 b4d575192c8cf5bf287f07fd9c159d879363525da22eaabfe9290ce56dbc0516d6c4923e50e4119403424714c857d388afe4b07c350a861b90e4178aa4b342b2
- SSDEEP 12288:uEEvWNPH5np48A9FjDBmzN3ZgbRDaR8/NzUzv3IgNaSWYdU4881GNT0Qkb3NnX+j:u5WNPH5nG8kFjDU8bMR8sF
- TLSH T134259324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification