Overview

overview

8

Static

static

3

skinchange...er.exe

windows10-ltsc_2021-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    skinchanger loader.exe
  • Size 314KB
  • Sample261102-te6c3axv7p
  • SHA256 b13ce3fa4d6bcc51f1de9a2d191346caf0208de8031e1819fb286eb7b98ae344
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionexecution

Malware Config

Targets

    • Target
      skinchanger loader.exe
    • Size 314KB
    • SHA256 b13ce3fa4d6bcc51f1de9a2d191346caf0208de8031e1819fb286eb7b98ae344
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks