General
- Target II-3.exe
- Size 18.3MB
- Sample260424-3a76jaft7j
- SHA256 9333da19e474e99fcf6d75230c8bc90b07ab2cbc13165b6d94ace9ae754edcff
- MD5 5ca0b94f86781d820ba721a3ebf271ef
- SHA1 5e8376b39a3f83115bafa4893ceb23e6f431e007
- SHA512 9acd8bd8d4d64ad8607984c2e73e62b857fa629d232caf4f4fa34e3a75f18a5e9a2a9bda609540bb7b212649f3b828ab5380e74b7ac2d14eb9e403a69938bb21
- SSDEEP 393216:F+ZKdzNMLpVDkUS2iqZ4LQ9YclY+jXbOq4DD8ADgsQDYBbMwlV:oINNMp1k6iv09YJgXbOqM8ADgHDqIwf
- TLSH T10D173362B6CFE43DF05A4B374572E24484FB7B656633AD2286E884ACDF691542D3E303
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
II-3.exe
Resource
win10v2004-20260130-en
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
II-3.exe
Resource
win10ltsc2021-20260130-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target II-3.exe
- Size 18.3MB
- SHA256 9333da19e474e99fcf6d75230c8bc90b07ab2cbc13165b6d94ace9ae754edcff
- MD5 5ca0b94f86781d820ba721a3ebf271ef
- SHA1 5e8376b39a3f83115bafa4893ceb23e6f431e007
- SHA512 9acd8bd8d4d64ad8607984c2e73e62b857fa629d232caf4f4fa34e3a75f18a5e9a2a9bda609540bb7b212649f3b828ab5380e74b7ac2d14eb9e403a69938bb21
- SSDEEP 393216:F+ZKdzNMLpVDkUS2iqZ4LQ9YclY+jXbOq4DD8ADgsQDYBbMwlV:oINNMp1k6iv09YJgXbOqM8ADgHDqIwf
- TLSH T10D173362B6CFE43DF05A4B374572E24484FB7B656633AD2286E884ACDF691542D3E303
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions