General
- Target e46781237e87a1f34439b7a43c66851861a5ace05f1605447462dc00b2d42825
- Size 1009KB
- Sample260810-rdccgsaq6v
- SHA256 e46781237e87a1f34439b7a43c66851861a5ace05f1605447462dc00b2d42825
- MD5 834a94e213d4c05a045f4f0e7a41064b
- SHA1 0a2fffe1ce7d3d1fca7917da224fed48b1491d8a
- SHA512 c76530cb56b674e2d17bef6d2293ab3ad6decd3b83616dca54148c3179b79561b2b221d3d4328fc5bcb218df0752a8a1fc91aaed84d1624326f1f139df0352a7
- SSDEEP 12288:/ledoBgE0P9LCsQGRp0NSHxkMNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dNgd:NeCGg0iNskg
- TLSH T141259224B9BA412DD037FFB83EDDF49EEDAB36151509A46B0041034B8A26AD0CF5B67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e46781237e87a1f34439b7a43c66851861a5ace05f1605447462dc00b2d42825.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
e46781237e87a1f34439b7a43c66851861a5ace05f1605447462dc00b2d42825.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target e46781237e87a1f34439b7a43c66851861a5ace05f1605447462dc00b2d42825
- Size 1009KB
- SHA256 e46781237e87a1f34439b7a43c66851861a5ace05f1605447462dc00b2d42825
- MD5 834a94e213d4c05a045f4f0e7a41064b
- SHA1 0a2fffe1ce7d3d1fca7917da224fed48b1491d8a
- SHA512 c76530cb56b674e2d17bef6d2293ab3ad6decd3b83616dca54148c3179b79561b2b221d3d4328fc5bcb218df0752a8a1fc91aaed84d1624326f1f139df0352a7
- SSDEEP 12288:/ledoBgE0P9LCsQGRp0NSHxkMNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dNgd:NeCGg0iNskg
- TLSH T141259224B9BA412DD037FFB83EDDF49EEDAB36151509A46B0041034B8A26AD0CF5B67D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification