General
- Target optic.exe
- Size 4.2MB
- Sample260527-e9fnkafs5j
- SHA256 f1873ba62c8c80ba1a94537165b35d4ae8cb960c2d5d30a7355b8ba7c05ce814
- MD5 abcb4ddffc5aa00565bd5be999ef518c
- SHA1 a032eac87342716c800116fb33825dc8ca5e2ebc
- SHA512 9f887c26eda1cbd74ac7c3169a32d0d823882fe6471bf3149e35564255364a2e6575f66f72c592bc41e01d0e1c174f5c38d62fdee15902b9fcd404f4575e9cde
- SSDEEP 49152:3C4aj7h1me1QaQwFZo4pdcnq2Q3XZEDnDXnEbmLuWw+5K3RFys1vFtM:O1rnQ5wdEq24u/XnEQu4UBFys1D
- TLSH T13B16AE4AE9530EEDF59B9A38A9657313A93275690B3483FF16DC0C619B272C00EF7346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
optic.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
optic.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target optic.exe
- Size 4.2MB
- SHA256 f1873ba62c8c80ba1a94537165b35d4ae8cb960c2d5d30a7355b8ba7c05ce814
- MD5 abcb4ddffc5aa00565bd5be999ef518c
- SHA1 a032eac87342716c800116fb33825dc8ca5e2ebc
- SHA512 9f887c26eda1cbd74ac7c3169a32d0d823882fe6471bf3149e35564255364a2e6575f66f72c592bc41e01d0e1c174f5c38d62fdee15902b9fcd404f4575e9cde
- SSDEEP 49152:3C4aj7h1me1QaQwFZo4pdcnq2Q3XZEDnDXnEbmLuWw+5K3RFys1vFtM:O1rnQ5wdEq24u/XnEQu4UBFys1D
- TLSH T13B16AE4AE9530EEDF59B9A38A9657313A93275690B3483FF16DC0C619B272C00EF7346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1