General
- Target sample
- Size 257KB
- Sample260417-v568qaev3n
- SHA256 11b8a6f052822133c43291ba3580d9d95ffeb907c51899186088eddf0187bce6
- MD5 6f37515374c0e840dba01570999b0312
- SHA1 07c62cc673075e0f0e7cb17dca6e3d2c168f49d2
- SHA512 4f53868778092eb68264bbb3f4dc33eb001f1952982e2f72e366e30c9a54664cf27b24fe53f9f789e8481a7d568813e7a9aec0a4b7ab9772006f7b21d88f1863
- SSDEEP 3072:F4ZCgDzqOQIwfoUVVlxVcOS6khdbZQYYIAp0hKEdhH:F4ZCgDzqOQIwfoMVXiVaIRThH
- TLSH T13B446C326340B43BA5139DA0A2BF6E0E3C39E12BDD0A46FCA591E970DFE2DB2151571D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260130-en
19 signatures
300 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11-20260130-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target sample
- Size 257KB
- SHA256 11b8a6f052822133c43291ba3580d9d95ffeb907c51899186088eddf0187bce6
- MD5 6f37515374c0e840dba01570999b0312
- SHA1 07c62cc673075e0f0e7cb17dca6e3d2c168f49d2
- SHA512 4f53868778092eb68264bbb3f4dc33eb001f1952982e2f72e366e30c9a54664cf27b24fe53f9f789e8481a7d568813e7a9aec0a4b7ab9772006f7b21d88f1863
- SSDEEP 3072:F4ZCgDzqOQIwfoUVVlxVcOS6khdbZQYYIAp0hKEdhH:F4ZCgDzqOQIwfoMVXiVaIRThH
- TLSH T13B446C326340B43BA5139DA0A2BF6E0E3C39E12BDD0A46FCA591E970DFE2DB2151571D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Drops desktop.ini file(s)
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3