General
- Target GoogleMeet.exe
- Size 1.6MB
- Sample260505-g2dkcahs3t
- SHA256 c544e0e555f6bffcc230adc2ba5b3f6b3e95700d85e532304d54d1acf8fc776e
- MD5 c5d54cee07cc50888ba66019499731ca
- SHA1 8d5d3e7a651773fdb23d8617feb1a0ed9e845d5d
- SHA512 95d5a95afc5a541e06701ad037f9b6cce747eb304f5814ceaaed57673bb5f9abb2498411f22f95cacb0ac0e115963b1c5adc0c05867965f8b3e35bdce6ac887d
- SSDEEP 49152:MOlCQ8msodjHF2bg2h0kSKX15dIpRkud5ou/btP:PXJrVRR75ou/Z
- TLSH T12285C034E6A15DBDCF37AAFCD08E44DB979BB9A203C5012717F086D68B613D0542EE29
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
GoogleMeet.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
GoogleMeet.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target GoogleMeet.exe
- Size 1.6MB
- SHA256 c544e0e555f6bffcc230adc2ba5b3f6b3e95700d85e532304d54d1acf8fc776e
- MD5 c5d54cee07cc50888ba66019499731ca
- SHA1 8d5d3e7a651773fdb23d8617feb1a0ed9e845d5d
- SHA512 95d5a95afc5a541e06701ad037f9b6cce747eb304f5814ceaaed57673bb5f9abb2498411f22f95cacb0ac0e115963b1c5adc0c05867965f8b3e35bdce6ac887d
- SSDEEP 49152:MOlCQ8msodjHF2bg2h0kSKX15dIpRkud5ou/btP:PXJrVRR75ou/Z
- TLSH T12285C034E6A15DBDCF37AAFCD08E44DB979BB9A203C5012717F086D68B613D0542EE29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1