General
- Target a9e800cd3b7ec434b57a7a53ebf285e3b8fbf8949a1a951cd13cc2656632c561
- Size 1.0MB
- Sample260807-ya273avxdx
- SHA256 a9e800cd3b7ec434b57a7a53ebf285e3b8fbf8949a1a951cd13cc2656632c561
- MD5 0010b1e0e57a1d4638cbd7cea8e997bb
- SHA1 ce07268b36dc9781dbad867189cf5f1444f11efb
- SHA512 ad6653b5375e6eae8f1c60df53a44901624d1a2da8a6e3922d7a9c35ba5796286e1a3061044d78ec7fa0a6510cc43ac0a063a75b2570e98266329f9d86c786b5
- SSDEEP 12288:8rW9wNLrvq1jDZezO3TGjhkkFNjNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8du:8ewNLrvq1jDwbjfFN7Q
- TLSH T16825A324B9BA412DD037FFB83EDDF49EEDAB3A151544A46B0141034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a9e800cd3b7ec434b57a7a53ebf285e3b8fbf8949a1a951cd13cc2656632c561.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a9e800cd3b7ec434b57a7a53ebf285e3b8fbf8949a1a951cd13cc2656632c561.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target a9e800cd3b7ec434b57a7a53ebf285e3b8fbf8949a1a951cd13cc2656632c561
- Size 1.0MB
- SHA256 a9e800cd3b7ec434b57a7a53ebf285e3b8fbf8949a1a951cd13cc2656632c561
- MD5 0010b1e0e57a1d4638cbd7cea8e997bb
- SHA1 ce07268b36dc9781dbad867189cf5f1444f11efb
- SHA512 ad6653b5375e6eae8f1c60df53a44901624d1a2da8a6e3922d7a9c35ba5796286e1a3061044d78ec7fa0a6510cc43ac0a063a75b2570e98266329f9d86c786b5
- SSDEEP 12288:8rW9wNLrvq1jDZezO3TGjhkkFNjNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8du:8ewNLrvq1jDwbjfFN7Q
- TLSH T16825A324B9BA412DD037FFB83EDDF49EEDAB3A151544A46B0141034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification