9ed2fecbef5df49648b4b9e91b3244d100ef73fea21106044057cd197bfaeb2e | Triage™

Login
Reports

Overview

overview

8

Static

static

3

App/FocusGuard.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
FocusGuard-Nadya-JournalFix.zip
Size 97KB
Sample260908-sxmg8stbrd
SHA256 9ed2fecbef5df49648b4b9e91b3244d100ef73fea21106044057cd197bfaeb2e
MD5 537a8184368ddf09ef2f93a8f72d3bc0
SHA1 08f9737336c52ed2e0fa7b0e44731211b2e8c3c4
SHA512 f9a3aecb188ac2b133355932d3e6a2251b94c5af65f9d5ef3ed1bbac18b17755b9a39d77edee4f982b1247c96e7cf1524bc168e66bbc0543bfef99391ae005c3
SSDEEP 1536:+fI3Obwnib+EWk+hvUYcJC+GcZ8FGqqfZfIgSC3Q7FJxobGcZICR/a7eK:+IXPuPfGGXpICg7FJxobGGJ1K
TLSH
T190A30249E9C6B598DF27EEB5106C5B08D03BE82D7A85E24EDC7B05494E524FC230B2D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

App/FocusGuard.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution

Malware Config

Targets

- Target
  App/FocusGuard.exe
- Size 4KB
- SHA256 5665d364dcd2504d72957bb8b3b0706ac4abd6bb771b2a747cac0e18826b0d2b
- MD5 5cb032318c3392865ee95853bdeec0f4
- SHA1 1716ab3955cb21adeaa2d11b7ba8188973495190
- SHA512 677ff99d92cfb7f55354ff0a4a7d2a8ee911a2c04146d648d5368dd55c333f9bb3006d84e983ed817e4354af104e1dfe1a85d0488192ff63f34f57eded2ad544
- SSDEEP 96:1azRdoTOcuDcpCjgBuRM1IdMSSRrQ736m:1aHDTgBlC+G7l
- TLSH
  T17F915141F3F84356E1B75B346AB3075266F6FD12CD33CB9E5981055C6C316108E62BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution
- Disables RegEdit via registry modification
  defense_evasion
- Disables Task Manager via registry modification
  defense_evasion
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecution

© 2018-2026

Terms | Privacy