General
- Target c7c28e288c2057c4ccd18c4f5a435a759820524e4052004edccf9db523d734b2
- Size 307KB
- Sample260807-zdd53stbkf
- SHA256 c7c28e288c2057c4ccd18c4f5a435a759820524e4052004edccf9db523d734b2
- MD5 ad07f17fb6cd525a9a27e7f9da529148
- SHA1 9106b07693197e51e6710c3bb4e8ae6b116514c3
- SHA512 7918e88643b0d03b518fec16f794290a7af2c7a8e9830297b708724ddbf144a24759e3cf0af9406618236f5b5b91710ba6fc23f25114188029cd071f32d938f2
- SSDEEP 6144:cVBcl89Kb5svuGWUa9cOgmTQ7d9CLqqGviflNk54GJCvqPM1:cVBR9Kb59DP9uaUsNE4R
- TLSH T1746423DDB2F58D58D3AE56350C28110D7A27A919813193CCB5DBABE7F0B241BE74A0F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c7c28e288c2057c4ccd18c4f5a435a759820524e4052004edccf9db523d734b2.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c7c28e288c2057c4ccd18c4f5a435a759820524e4052004edccf9db523d734b2.dll
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target c7c28e288c2057c4ccd18c4f5a435a759820524e4052004edccf9db523d734b2
- Size 307KB
- SHA256 c7c28e288c2057c4ccd18c4f5a435a759820524e4052004edccf9db523d734b2
- MD5 ad07f17fb6cd525a9a27e7f9da529148
- SHA1 9106b07693197e51e6710c3bb4e8ae6b116514c3
- SHA512 7918e88643b0d03b518fec16f794290a7af2c7a8e9830297b708724ddbf144a24759e3cf0af9406618236f5b5b91710ba6fc23f25114188029cd071f32d938f2
- SSDEEP 6144:cVBcl89Kb5svuGWUa9cOgmTQ7d9CLqqGviflNk54GJCvqPM1:cVBR9Kb59DP9uaUsNE4R
- TLSH T1746423DDB2F58D58D3AE56350C28110D7A27A919813193CCB5DBABE7F0B241BE74A0F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification