General
- Target DarthAqua.exe
- Size 6.3MB
- Sample260429-x6bvbabs4l
- SHA256 ef5ecf10fd23d5cbc23071b0600bb9965529b371440adedb781b510972bfd0a9
- MD5 b1b6b70c8992d9f1f7a1732ed3c42721
- SHA1 042361f61b50d7ed4e287a513b964928b1448eb8
- SHA512 01c9774c9db22b95ac0b5b2a77ce01064eff65be54031694f3e38a15704b779555e7844ee48baac4dfbe395fc60d5e957ecabd9f683fec003589d240249a3134
- SSDEEP 196608:A+v8ZkLdQmRJ8Qnf2ODjMnGydS8SFcD4v:RqkLdQeF3MnG38SFcD4v
- TLSH T10966339A77890CF6F8672138C0928549D7B1BD1217B0DB7367A05A6A0F573D02F3BB98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
DarthAqua.exe
Resource
win10ltsc2021-20260130-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target DarthAqua.exe
- Size 6.3MB
- SHA256 ef5ecf10fd23d5cbc23071b0600bb9965529b371440adedb781b510972bfd0a9
- MD5 b1b6b70c8992d9f1f7a1732ed3c42721
- SHA1 042361f61b50d7ed4e287a513b964928b1448eb8
- SHA512 01c9774c9db22b95ac0b5b2a77ce01064eff65be54031694f3e38a15704b779555e7844ee48baac4dfbe395fc60d5e957ecabd9f683fec003589d240249a3134
- SSDEEP 196608:A+v8ZkLdQmRJ8Qnf2ODjMnGydS8SFcD4v:RqkLdQeF3MnG38SFcD4v
- TLSH T10966339A77890CF6F8672138C0928549D7B1BD1217B0DB7367A05A6A0F573D02F3BB98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Possible privilege escalation attempt
-
Loads dropped DLL
-
Modifies file permissions
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Drops file in System32 directory