General
- Target Agreement.exe
- Size 15.9MB
- Sample260602-pmwrdads4w
- SHA256 820f4cd574d2312f8da212db12caa5e994d1e7ab9a513104d921b44f4cdd425a
- MD5 f2bfb5e9ae3e801da0318c01483bd607
- SHA1 41af093bf758e6a441b10a8aff5ea14268fee51e
- SHA512 ce5dc86bb6a79e013a7ebfab2eb43b8a416e7fec40efb5634c858128dc960b8f77456dec5c8626ece54862d0c73dd13640eac2770ee7beb0c29c014af7c6127a
- SSDEEP 393216:wJrPSIwPrxgU5+0QXcZBae/2TonNiY/x10CFDN3cccQrgeQToFFWJT:groPVk0GMb/Ji4x1NDa88JT
- TLSH T17CF6332BF65A04FAD877D538C99542A3FB71B156032962D707A48C361F7A3E5223B30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Agreement.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Agreement.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Agreement.exe
- Size 15.9MB
- SHA256 820f4cd574d2312f8da212db12caa5e994d1e7ab9a513104d921b44f4cdd425a
- MD5 f2bfb5e9ae3e801da0318c01483bd607
- SHA1 41af093bf758e6a441b10a8aff5ea14268fee51e
- SHA512 ce5dc86bb6a79e013a7ebfab2eb43b8a416e7fec40efb5634c858128dc960b8f77456dec5c8626ece54862d0c73dd13640eac2770ee7beb0c29c014af7c6127a
- SSDEEP 393216:wJrPSIwPrxgU5+0QXcZBae/2TonNiY/x10CFDN3cccQrgeQToFFWJT:groPVk0GMb/Ji4x1NDa88JT
- TLSH T17CF6332BF65A04FAD877D538C99542A3FB71B156032962D707A48C361F7A3E5223B30B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1