General
- Target Stub.exe
- Size 209KB
- Sample260421-b45tqaax2t
- SHA256 41c4ce0997c63ab41874dae9ccc0b4922d7426eb25f5a4640fcbf0ee89002fa0
- MD5 3ae6028d14180f116af3ab3e3bdd49e4
- SHA1 7752b122ce3763f6c1a11694b2c11aa50e577a8c
- SHA512 6bf0ea273ff85f2f3ce54f2173bb199b7eae7e5a77d30f2c68379ee75bc1220f82bcb0976acc6637a4ec70dd6c5404d9131e6a0dca0d52412f9901c90fe5f356
- SSDEEP 6144:608A/ehUOqx8PBgnRtQ0UiB97SCpMW90KImQijnCbJewO:6XAwUOqx8PijQo
- TLSH T1DC2449981397897DD63D237ED0A1120907F56223C507F34E9EE5E4F89E2B3129B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Stub.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stub.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Stub.exe
- Size 209KB
- SHA256 41c4ce0997c63ab41874dae9ccc0b4922d7426eb25f5a4640fcbf0ee89002fa0
- MD5 3ae6028d14180f116af3ab3e3bdd49e4
- SHA1 7752b122ce3763f6c1a11694b2c11aa50e577a8c
- SHA512 6bf0ea273ff85f2f3ce54f2173bb199b7eae7e5a77d30f2c68379ee75bc1220f82bcb0976acc6637a4ec70dd6c5404d9131e6a0dca0d52412f9901c90fe5f356
- SSDEEP 6144:608A/ehUOqx8PBgnRtQ0UiB97SCpMW90KImQijnCbJewO:6XAwUOqx8PijQo
- TLSH T1DC2449981397897DD63D237ED0A1120907F56223C507F34E9EE5E4F89E2B3129B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1