General
- Target Atlas.exe
- Size 16.5MB
- Sample260511-xmvs3sct6l
- SHA256 aa6613b095648e905693c7a1532e98891b4c9c5849b7a90d4901f9c30eb69ec9
- MD5 f7bc32f0a1f3689ae74b024288b2621e
- SHA1 c13a65720505cc6107d749db3120f4291d80134d
- SHA512 89ee9e685c505b2d887374b655a36c5886101b0062042e4341db57825d4849de4c7107450ea6581ab3664ff1254e5001acfb7312f7d878c88ac9972e0535e012
- SSDEEP 393216:2I/1FqD6I9JhfhrnblRmRJXDg5fzMTnX:20zIrJrnbX5Y7
- TLSH T1A7072306F39586A9D476D13CC652A317EB72B8160322CBDB73DE59211FA71D04E3EB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Atlas.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Atlas.exe
Resource
win11-20260130-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target Atlas.exe
- Size 16.5MB
- SHA256 aa6613b095648e905693c7a1532e98891b4c9c5849b7a90d4901f9c30eb69ec9
- MD5 f7bc32f0a1f3689ae74b024288b2621e
- SHA1 c13a65720505cc6107d749db3120f4291d80134d
- SHA512 89ee9e685c505b2d887374b655a36c5886101b0062042e4341db57825d4849de4c7107450ea6581ab3664ff1254e5001acfb7312f7d878c88ac9972e0535e012
- SSDEEP 393216:2I/1FqD6I9JhfhrnblRmRJXDg5fzMTnX:20zIrJrnbX5Y7
- TLSH T1A7072306F39586A9D476D13CC652A317EB72B8160322CBDB73DE59211FA71D04E3EB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1