General
- Target enter-pidor-name.exe
- Size 2.2MB
- Sample260515-zy2f4sa19j
- SHA256 5904981b80535d4159d72e1cd6feec42e02ff75cb586266b0027daabc4fab788
- MD5 b0a572141db8a09016697377e3d1d69a
- SHA1 8478faf1e600cecb8df4e7b84c926817493c08aa
- SHA512 50e482347a2d36a3103c6617a87aff9be2b770ff11e582574801e7991f0bf21a1f1e80a972dc22bd500db4db9f3b874ed44d054ffd03876af57d5eedc54e5e07
- SSDEEP 49152:yWf/yflNLOamTF5hwbnD0t/kwtYhi30/QLOkNNtUsjQ:j/yflNSBTwus26QiMfj
- TLSH T1ABA5AE1962E301FAF1BAE17489164B13F9717459072096EFD3D80A8A6FF32E05B3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
enter-pidor-name.exe
Resource
win11-20260513-en
6 signatures
300 seconds
Malware Config
Targets
-
- Target enter-pidor-name.exe
- Size 2.2MB
- SHA256 5904981b80535d4159d72e1cd6feec42e02ff75cb586266b0027daabc4fab788
- MD5 b0a572141db8a09016697377e3d1d69a
- SHA1 8478faf1e600cecb8df4e7b84c926817493c08aa
- SHA512 50e482347a2d36a3103c6617a87aff9be2b770ff11e582574801e7991f0bf21a1f1e80a972dc22bd500db4db9f3b874ed44d054ffd03876af57d5eedc54e5e07
- SSDEEP 49152:yWf/yflNLOamTF5hwbnD0t/kwtYhi30/QLOkNNtUsjQ:j/yflNSBTwus26QiMfj
- TLSH T1ABA5AE1962E301FAF1BAE17489164B13F9717459072096EFD3D80A8A6FF32E05B3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1