General
- Target Invoice-PRMREGVK-0003.exe
- Size 21.8MB
- Sample260424-phy1yahw3x
- SHA256 fc99b9483117e98d618fa709c9bff4944f52c445c452ee8fea3e92ca3e720e60
- MD5 d77bf25b85a45f68d7601a9b7d74c9d9
- SHA1 8654d930b771f744c37d5afb2df51f4ae95801ed
- SHA512 d0c763e0e0736ca6365f34e0c7eea606633ae2453e599a823c5165a7e68008a6dc04deb73ef5c847e03be42600be2dd8f418f57e3f33bf5a143e9cfd686bc514
- SSDEEP 393216:+tolZoSUFNgCMOhVoBaAiUNaL70q1uzCJPeT8FJnehMOe5NI+Wb3Q:+tobo/qEVooAZNKYeJPeTe9B5JWc
- TLSH T159373338F6E55CBEDE3BAAFCD09E449B575AB5A603C4012327F1C6D28B213D4542EE09
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Invoice-PRMREGVK-0003.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Invoice-PRMREGVK-0003.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Invoice-PRMREGVK-0003.exe
- Size 21.8MB
- SHA256 fc99b9483117e98d618fa709c9bff4944f52c445c452ee8fea3e92ca3e720e60
- MD5 d77bf25b85a45f68d7601a9b7d74c9d9
- SHA1 8654d930b771f744c37d5afb2df51f4ae95801ed
- SHA512 d0c763e0e0736ca6365f34e0c7eea606633ae2453e599a823c5165a7e68008a6dc04deb73ef5c847e03be42600be2dd8f418f57e3f33bf5a143e9cfd686bc514
- SSDEEP 393216:+tolZoSUFNgCMOhVoBaAiUNaL70q1uzCJPeT8FJnehMOe5NI+Wb3Q:+tobo/qEVooAZNKYeJPeTe9B5JWc
- TLSH T159373338F6E55CBEDE3BAAFCD09E449B575AB5A603C4012327F1C6D28B213D4542EE09
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1