Overview

overview

7

Static

static

1

Windows11I...nt.exe

windows11-21h2-x64

7

Resubmissions

26/03/2024, 18:06

240326-wp3q2abd3x7

26/03/2024, 18:03

240326-wm9rkagd267

26/03/2024, 01:20

240326-bp4ywabc437

26/03/2024, 01:20

240326-bp4ccabc42

25/03/2024, 20:21

240325-y5dsysbf7y7

25/03/2024, 20:21

240325-y47dwabf7w1

25/03/2024, 20:21

240325-y46scagh77

25/03/2024, 20:20

240325-y4vp3sgh741

25/03/2024, 18:59

240325-xnhvxaaf411

Sharing

Copy URL Twitter E-mail

General

  • Target
    Windows11InstallationAssistant.exe
  • Size 4.0MB
  • Sample240325-y5dsysbf7y
  • SHA256 03a9b3163071ecb41e20b95eb664c3165b9fcaba89f5e5433484d65e8cfa0380
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoverypersistence

Malware Config

Targets

    • Target
      Windows11InstallationAssistant.exe
    • Size 4.0MB
    • SHA256 03a9b3163071ecb41e20b95eb664c3165b9fcaba89f5e5433484d65e8cfa0380
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops desktop.ini file(s)

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks