General

  • Target

    akz005e6f.exe

  • Size

    393KB

  • Sample

    200530-48699l4h72

  • MD5

    9f644f47c636c47c8908f9e68ff4ad84

  • SHA1

    cf22f9316a701d60251a59416787008f1afca74a

  • SHA256

    fb68a891eea232c96d386965ada4386a546c7c2e5d1424718d6b27260a310aed

  • SHA512

    3018315c5c6c51ce8242b4cfb011f0f14435c019e61bc293d67409a02476bf7f33a2ad9e0b5e0dffb631e332d54be4d564d1313e582da9981c1333c3a48bcafd

Score
10/10

Malware Config

Targets

    • Target

      akz005e6f.exe

    • Size

      393KB

    • MD5

      9f644f47c636c47c8908f9e68ff4ad84

    • SHA1

      cf22f9316a701d60251a59416787008f1afca74a

    • SHA256

      fb68a891eea232c96d386965ada4386a546c7c2e5d1424718d6b27260a310aed

    • SHA512

      3018315c5c6c51ce8242b4cfb011f0f14435c019e61bc293d67409a02476bf7f33a2ad9e0b5e0dffb631e332d54be4d564d1313e582da9981c1333c3a48bcafd

    Score
    10/10
    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Stops running service(s)

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Modify Existing Service

2
T1031

Defense Evasion

Modify Registry

1
T1112

Disabling Security Tools

2
T1089

Impact

Service Stop

1
T1489

Tasks