General
-
Target
temp.exe
-
Size
2.7MB
-
Sample
241121-n7tbbasjgs
-
MD5
80e3cf78b36403d94dc167fb157241a7
-
SHA1
990c00b029bb0006968d5ff970257793a94e5429
-
SHA256
64be767713553d9381add65aa62e302691a86257c087ddbaccdf56f7b905cb31
-
SHA512
7eaf50cd1a18a77737522d85084f7bca394ac7f2e6afdef96a0fbc47ba33c3d7d543d12ce8cc106203ffeb3c20bee63f099f7ca2817d9ba2ff821ae342c023ad
-
SSDEEP
49152:smuk6Flic1CcPANlX7c8TuQsRVg+HIbHczjzXThtYJtkE:+XCKfDNlsCE
Static task
static1
Behavioral task
behavioral1
Sample
temp.exe
Resource
win10ltsc2021-20241023-en
Malware Config
Targets
-
-
Target
temp.exe
-
Size
2.7MB
-
MD5
80e3cf78b36403d94dc167fb157241a7
-
SHA1
990c00b029bb0006968d5ff970257793a94e5429
-
SHA256
64be767713553d9381add65aa62e302691a86257c087ddbaccdf56f7b905cb31
-
SHA512
7eaf50cd1a18a77737522d85084f7bca394ac7f2e6afdef96a0fbc47ba33c3d7d543d12ce8cc106203ffeb3c20bee63f099f7ca2817d9ba2ff821ae342c023ad
-
SSDEEP
49152:smuk6Flic1CcPANlX7c8TuQsRVg+HIbHczjzXThtYJtkE:+XCKfDNlsCE
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2