General
- Target Spirit tweaks v1.exe
- Size 308KB
- Sample260416-mfdacacy4n
- SHA256 7a71b69c439fefdedcd95f14b3fe30e1f0703fafbdee1bd6c9da51d2c32caae3
- MD5 8917dc00fe5f0bf7a4f4a20fc0bddc5c
- SHA1 7d38be680ed118f9537b2a573f3c6e4dcf710f06
- SHA512 b299b48b2a17b50428f34e1cdd5d4dab8313885469f7dab5fa6ee40e046dc3066cf74472204a860879bc2ae6efd2f3eef762cf1fe51ef70bd43d6dc994977684
- SSDEEP 6144:zBlkZvaF4NTBVyWMZc1scQyIiDXJF6JVptNAazRYI:zoSWNT7ydJYH6J7t7H
- TLSH T19F64AF290FEB895AC29219B90AF0D17EF67881401B19D763C7F42C57BF24EC8BA6C1D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Spirit tweaks v1.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Spirit tweaks v1.exe
- Size 308KB
- SHA256 7a71b69c439fefdedcd95f14b3fe30e1f0703fafbdee1bd6c9da51d2c32caae3
- MD5 8917dc00fe5f0bf7a4f4a20fc0bddc5c
- SHA1 7d38be680ed118f9537b2a573f3c6e4dcf710f06
- SHA512 b299b48b2a17b50428f34e1cdd5d4dab8313885469f7dab5fa6ee40e046dc3066cf74472204a860879bc2ae6efd2f3eef762cf1fe51ef70bd43d6dc994977684
- SSDEEP 6144:zBlkZvaF4NTBVyWMZc1scQyIiDXJF6JVptNAazRYI:zoSWNT7ydJYH6J7t7H
- TLSH T19F64AF290FEB895AC29219B90AF0D17EF67881401B19D763C7F42C57BF24EC8BA6C1D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10UAC bypass
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
1