General
- Target Defender Control.rar
- Size 233KB
- Sample261015-vbkgvsdc96
- SHA256 1adba6890ae289b6aefcba3d00bd8d19b265693ccee0e7d9236d7f60324102b3
- MD5 f33c0719b824dd66052c9f719c2c492f
- SHA1 a58ace9490a2c2af9785aaf3ac5de11e8722f376
- SHA512 bf2502b52ee4ab8c765d42b370d68db5c2500df75a8ea11aae659b76f7ec72a26ef01653183d6c4ed04c01aa0db93e501149ef2b5e5fb1c4186b4d9945833243
- SSDEEP 6144:jCqtXHTzmN9bOXNIXiRRzgQx4JHv+iIb9zAZd26Ka+i:jHXXAZZSRuQqJHLdH26Kat
- TLSH T15A341245E2BC689CD2496E262D06DBEFF00D94C541E6850ED0A9C432819B1B4ABB73EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Defender Control.rar
Resource
win11-20260911-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target Defender Control.rar
- Size 233KB
- SHA256 1adba6890ae289b6aefcba3d00bd8d19b265693ccee0e7d9236d7f60324102b3
- MD5 f33c0719b824dd66052c9f719c2c492f
- SHA1 a58ace9490a2c2af9785aaf3ac5de11e8722f376
- SHA512 bf2502b52ee4ab8c765d42b370d68db5c2500df75a8ea11aae659b76f7ec72a26ef01653183d6c4ed04c01aa0db93e501149ef2b5e5fb1c4186b4d9945833243
- SSDEEP 6144:jCqtXHTzmN9bOXNIXiRRzgQx4JHv+iIb9zAZd26Ka+i:jHXXAZZSRuQqJHLdH26Kat
- TLSH T15A341245E2BC689CD2496E262D06DBEFF00D94C541E6850ED0A9C432819B1B4ABB73EF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Modifies firewall policy service
-
Modifies security service
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Windows security modification
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
6Windows Service
6Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
6Windows Service
6Event Triggered Execution
1Image File Execution Options Injection
1