General
- Target Docusign_Installer.exe
- Size 15.9MB
- Sample260601-vsvn6abs61
- SHA256 ebce43f8825e6147fa9fd23aa5feb094a08036faaf5069a4fc4dc0e4f49ee603
- MD5 d1d6914e9e4e52506565566e52df16ab
- SHA1 fdbee4e2bad2dfa9931189eeb83952c63fcdcd93
- SHA512 f5c069ddcfa51ae681c59523a6290b82d7bd452c245b2ce8d78ce624d009b000b0b260884b7f4bbb6b05ec081ce52e4444ace1b5107b2cec23c8a13c2cf0a993
- SSDEEP 393216:wJrPSIwPrxgU5+0QXcZBae/2TonNiY/x10CFDN3cccQrgeQToFFWJ9:groPVk0GMb/Ji4x1NDa88J9
- TLSH T1F0F6332BF65A04FAD877D538C99542A3FB71B156032962D707A48C361F7A3E5223B30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Docusign_Installer.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
Docusign_Installer.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Docusign_Installer.exe
- Size 15.9MB
- SHA256 ebce43f8825e6147fa9fd23aa5feb094a08036faaf5069a4fc4dc0e4f49ee603
- MD5 d1d6914e9e4e52506565566e52df16ab
- SHA1 fdbee4e2bad2dfa9931189eeb83952c63fcdcd93
- SHA512 f5c069ddcfa51ae681c59523a6290b82d7bd452c245b2ce8d78ce624d009b000b0b260884b7f4bbb6b05ec081ce52e4444ace1b5107b2cec23c8a13c2cf0a993
- SSDEEP 393216:wJrPSIwPrxgU5+0QXcZBae/2TonNiY/x10CFDN3cccQrgeQToFFWJ9:groPVk0GMb/Ji4x1NDa88J9
- TLSH T1F0F6332BF65A04FAD877D538C99542A3FB71B156032962D707A48C361F7A3E5223B30B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1