General
- Target Expense-Summary-Report-xlsx.exe
- Size 7.0MB
- Sample260608-wyltwaev7m
- SHA256 86844b09dda6be037c930e0e6624af762e0184749c0557a4ad3ba4b8d6ddb908
- MD5 18039d83553ace979886234e2515b258
- SHA1 5ac430370d9621185f76f5c0fa628ac13c6eb93f
- SHA512 07079282c2828846e911c72122b36a06d5bebbc0184a0af15d91dc65e3dd53a79ffe4af817e5ca356cfb06ad56d82c36fef61bfaf38a106bb176cda7dd24fe83
- SSDEEP 196608:pXzvm6eIrZ3K3xnLZGTIB4M+IFQyXI5q0:U1I130xgxIFQyXG/
- TLSH T1D8762378E3E25DBDDF27A6BCD04E48DBA75BB9A203C4012717F086D58B212D4442EF69
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Expense-Summary-Report-xlsx.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Expense-Summary-Report-xlsx.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Expense-Summary-Report-xlsx.exe
- Size 7.0MB
- SHA256 86844b09dda6be037c930e0e6624af762e0184749c0557a4ad3ba4b8d6ddb908
- MD5 18039d83553ace979886234e2515b258
- SHA1 5ac430370d9621185f76f5c0fa628ac13c6eb93f
- SHA512 07079282c2828846e911c72122b36a06d5bebbc0184a0af15d91dc65e3dd53a79ffe4af817e5ca356cfb06ad56d82c36fef61bfaf38a106bb176cda7dd24fe83
- SSDEEP 196608:pXzvm6eIrZ3K3xnLZGTIB4M+IFQyXI5q0:U1I130xgxIFQyXG/
- TLSH T1D8762378E3E25DBDDF27A6BCD04E48DBA75BB9A203C4012717F086D58B212D4442EF69
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies file permissions
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
File and Directory Permissions Modification
1Impair Defenses
1Disable or Modify System Firewall
1