General
- Target FocusGuard-Nadya-StatePermissions.zip
- Size 97KB
- Sample260908-s497watdkf
- SHA256 fb174a8ad93350ef30a8643af50d0daa03326ffb2804c5ac21524a9369524500
- MD5 8681e1897d99085325fa57228c2feb59
- SHA1 306a09eb93f25854e1800416145bffbdc088e9f2
- SHA512 6bb531f3aeb0ca535277f21ce25c59e0f31ce38e541c85bbd41789372b16eca153baf454d1a9e460ecffa4a26b7b69f7aa804d29de97178b85f5b757ca74eaf4
- SSDEEP 1536:+fIADF1E8LMiMGd5GcZ8FGqqfZfICSC3Q7FJxobGcZICR/a7ef:+I+FJLMiPGGXpI8g7FJxobGGJ1f
- TLSH T15FA30294E9416298FE53F9B060E9278B9037512EBF08E24FDCEA06595C634ED530B3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
App/FocusGuard.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target App/FocusGuard.exe
- Size 4KB
- SHA256 9aefd2c1a65fff203c1d3b155f02fbce4d61497e5c11f35a47224df711b1be96
- MD5 374fe9e081b6b760d9c028ea4f6def10
- SHA1 9f85c721b221062d1c37aeafa7e380cc242be8c4
- SHA512 1112a65d7a1df0f796fe38703cae86bb0c46591b91e52aee451d7c13594f7fa8a2b87b4299d33b070dfaca80dca1b27dcaddf16216815ce1d48a3993c44d6f6f
- SSDEEP 96:SazRdoTOcuDcpCjgBuRM1IdMSZRrQ736m:SaHDTgBlClG7l
- TLSH T1A7916041F3F8435AE0B75B346AB3471266FAFD12C933CB9E5980015C6C326108E62BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Drops file in System32 directory