General
- Target 154e5ff0ec60b431439eba15818deace74c5d4e8098ba989f30ac57948f7df4f
- Size 1007KB
- Sample260812-lynclabh62
- SHA256 154e5ff0ec60b431439eba15818deace74c5d4e8098ba989f30ac57948f7df4f
- MD5 82e71b8dcf7457f01eb70f3faf64c7db
- SHA1 b7fca6b0eebc6f307726600daed3a74dbe4ba519
- SHA512 73b1a044fe6bc02111f6dab4f9db04c83e8c1e8085fcedd81e2d3f6d18d61ed13723037d8c49975b64c6634188f08f624b46d98bc41922166572c6ec17760fba
- SSDEEP 12288:A15B4BXBcUsK1o/9Nn7IORfoE+W5NzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S7m8V:A1P4BRcUEaOhvXjDM
- TLSH T11E258324B9BA812DD037FFB83EDDF49EECAB36151545A46B0041034B8A26AD0DF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
154e5ff0ec60b431439eba15818deace74c5d4e8098ba989f30ac57948f7df4f.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
154e5ff0ec60b431439eba15818deace74c5d4e8098ba989f30ac57948f7df4f.dll
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 154e5ff0ec60b431439eba15818deace74c5d4e8098ba989f30ac57948f7df4f
- Size 1007KB
- SHA256 154e5ff0ec60b431439eba15818deace74c5d4e8098ba989f30ac57948f7df4f
- MD5 82e71b8dcf7457f01eb70f3faf64c7db
- SHA1 b7fca6b0eebc6f307726600daed3a74dbe4ba519
- SHA512 73b1a044fe6bc02111f6dab4f9db04c83e8c1e8085fcedd81e2d3f6d18d61ed13723037d8c49975b64c6634188f08f624b46d98bc41922166572c6ec17760fba
- SSDEEP 12288:A15B4BXBcUsK1o/9Nn7IORfoE+W5NzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S7m8V:A1P4BRcUEaOhvXjDM
- TLSH T11E258324B9BA812DD037FFB83EDDF49EECAB36151545A46B0041034B8A26AD0DF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Windows security bypass
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Executes dropped EXE
-
Windows security modification