General
- Target BensCloud.exe
- Size 6.5MB
- Sample260604-xb3dsacy9k
- SHA256 cdcd3e64e4ff234c00060df2a391126c228ec5b86bdb224c4feaf5851fdbe7bc
- MD5 31de033a52c748b3d8515103a9d965b2
- SHA1 add26de8435bb5a327c0bfc57c13b496f33d16f5
- SHA512 387d3a47f2a7825ad64a1267d199f6686ce37c835ef5b6102465d77dae74f2935129e87f73ae20cb459337b9abdc0176e5501480963c7fb6b978708168d9a0dd
- SSDEEP 98304:yGLWn+6TjI03sTyq5L+kH4WJAN5b4MN4lcQzoMZ66X85YfeEXC+Kbr8FjC1y63L:/in+JZL+q4WJAntN4lT0v5ueE0
- TLSH T14066E04377DB68E6D8C72B74AADF13388722EE309F690B6B4558C3341C532E9AD0E651
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BensCloud.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
BensCloud.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target BensCloud.exe
- Size 6.5MB
- SHA256 cdcd3e64e4ff234c00060df2a391126c228ec5b86bdb224c4feaf5851fdbe7bc
- MD5 31de033a52c748b3d8515103a9d965b2
- SHA1 add26de8435bb5a327c0bfc57c13b496f33d16f5
- SHA512 387d3a47f2a7825ad64a1267d199f6686ce37c835ef5b6102465d77dae74f2935129e87f73ae20cb459337b9abdc0176e5501480963c7fb6b978708168d9a0dd
- SSDEEP 98304:yGLWn+6TjI03sTyq5L+kH4WJAN5b4MN4lcQzoMZ66X85YfeEXC+Kbr8FjC1y63L:/in+JZL+q4WJAntN4lT0v5ueE0
- TLSH T14066E04377DB68E6D8C72B74AADF13388722EE309F690B6B4558C3341C532E9AD0E651
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Adds autorun key to be loaded by Explorer.exe on startup
Drops startup file
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1