General
- Target Destroyer.exe
- Size 71KB
- Sample260604-22ahxahs2k
- SHA256 fe37d1ffcde030141e084a28aba766d0555d47665127c41a8af2038db2168591
- MD5 cfa188442e3852b7569daf83d8f6d94c
- SHA1 2d46033d23cb61f63a9a9769fcb1837c2a97849c
- SHA512 e813e55ca5ff28126dfd32789c839799b72db3fc49ff8be4d63bb3e37392608b3040f49c0f9255a39d12e7ae69f88623b7cf6b80e744521f131342e17be66317
- SSDEEP 1536:KVIn7vLAsry2eslLS8Ti1nQyd9O3jKVfOOHoHoLOO:KU/9+vstGGGFOCp
- TLSH T114634B93B6C25772E58156B1019139B7EB31E73AC3629EC3D3085907EF560F2CC7A29A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Destroyer.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Destroyer.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Destroyer.exe
- Size 71KB
- SHA256 fe37d1ffcde030141e084a28aba766d0555d47665127c41a8af2038db2168591
- MD5 cfa188442e3852b7569daf83d8f6d94c
- SHA1 2d46033d23cb61f63a9a9769fcb1837c2a97849c
- SHA512 e813e55ca5ff28126dfd32789c839799b72db3fc49ff8be4d63bb3e37392608b3040f49c0f9255a39d12e7ae69f88623b7cf6b80e744521f131342e17be66317
- SSDEEP 1536:KVIn7vLAsry2eslLS8Ti1nQyd9O3jKVfOOHoHoLOO:KU/9+vstGGGFOCp
- TLSH T114634B93B6C25772E58156B1019139B7EB31E73AC3629EC3D3085907EF560F2CC7A29A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Drops file in System32 directory
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1