ecc0ca33ac16bc582e1a66968e81ed5872f1f5babf95989a0dc3e0fceb46594a | Triage™

Login
Reports

Overview

overview

8

Static

static

3

App/FocusGuard.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
FocusGuard-Nadya-Home-AccountFix.zip
Size 95KB
Sample260908-srtdlataqf
SHA256 ecc0ca33ac16bc582e1a66968e81ed5872f1f5babf95989a0dc3e0fceb46594a
MD5 f002c9cf9f010667b23eb3fb1f52687e
SHA1 ca08422cf4032bd98398e86d44dee8ea5037bd9e
SHA512 bc36b6f4590b946f64b544fba6fa3e20a692b8d482baa04d2a87dd0ecf71e2647f14eb1918833c8f0563d39f96821eb32799eb1c93486f8f5f6502e5e2603792
SSDEEP 1536:+fIrg4xdcOSWxiUvL0VNqng7FGJqfZfIdnSSC3Q7FJxoDTCR/a7e/:+IBRMQLHngTpIdnsg7FJxoDO1/
TLSH
T17A930286EC0135DCDFD378B661E66558583E71A83B8CE21EECB5104D8C858BE174A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

App/FocusGuard.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery execution persistence

Malware Config

Targets

- Target
  App/FocusGuard.exe
- Size 4KB
- SHA256 7bbeeeada303ad234b5e58662cfbfbf4951b6ed0cdee708e5c1917729e6e4380
- MD5 1d670508bb8f4ac1b01a64848da793f1
- SHA1 96def291096e82e5324ba3a5f2a7832909dff36c
- SHA512 52a67038bc2850d350a0b5c094f7c4f8c63667f12a948fe8fc3a119c22233b8ff14e37ecbb743a6dbe3c2511692786dbb68854380249a63cf0402a58717c43b3
- SSDEEP 96:CazRdoTOcuDcpCjgBuRM1IdMS8RrQ736m:CaHDTgBlCYG7l
- TLSH
  T14F914141F3F84366E1B75B346AB3175266F6FD12C933CB9E5981055C6C327108E62BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution persistence
- Disables RegEdit via registry modification
  defense_evasion
- Disables Task Manager via registry modification
  defense_evasion
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistence

© 2018-2026

Terms | Privacy