General
- Target stager.exe
- Size 6.3MB
- Sample260601-xevhcadv4x
- SHA256 5214469c45a6288c0b32775984bcd5ef1ff0f9a41300e222681528b05a4609cb
- MD5 beebfefef808e6b5ace4c4677c8a4e12
- SHA1 ebbd00946e2b3e3d80d99d6042507769d8f988d9
- SHA512 2c9da7fd6535894f87b04c56e14a83ba987bad13d76056aee5e8d4a4abd6306e3e117f6a38dd21e5633eaaa893e128e46b77722f156bcccc85708e2a3293a413
- SSDEEP 196608:IvONTwhLWdQmRJ8aycBIGpEMk0ax8+n7hz+Z:I7LWdQuR9taxZndSZ
- TLSH T1776633E497E818E8FAB7D13C4D738029C57278164365E2C707E58B9A1E6B3F02CB9B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
stager.exe
Resource
win11-20260513-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target stager.exe
- Size 6.3MB
- SHA256 5214469c45a6288c0b32775984bcd5ef1ff0f9a41300e222681528b05a4609cb
- MD5 beebfefef808e6b5ace4c4677c8a4e12
- SHA1 ebbd00946e2b3e3d80d99d6042507769d8f988d9
- SHA512 2c9da7fd6535894f87b04c56e14a83ba987bad13d76056aee5e8d4a4abd6306e3e117f6a38dd21e5633eaaa893e128e46b77722f156bcccc85708e2a3293a413
- SSDEEP 196608:IvONTwhLWdQmRJ8aycBIGpEMk0ax8+n7hz+Z:I7LWdQuR9taxZndSZ
- TLSH T1776633E497E818E8FAB7D13C4D738029C57278164365E2C707E58B9A1E6B3F02CB9B15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1