General
- Target lc.exe
- Size 331KB
- Sample260619-tba3raht9m
- SHA256 8cd02686e30e022dc5b7e759d5f00904f7c5c98fc8df86e8ab4ddf867054d4f5
- MD5 c379aa9ceb263088564e110b984ebdc8
- SHA1 df0c0ef6803ea4f881e72aa92f85cb9f1483a559
- SHA512 ac34ce30c3c8b35c354c39217969c42d56cfda1a5f94d2a4cc2a1d1afbbc06531180ee25d37418eed17f64566653e8df76341d2353a10a3eb0104934564c48bb
- SSDEEP 6144:xa0UKsyo7Np3SCpMW90KImQinnVbk6zEnQd/hwQBjrQi33v8U:xa0UKiNphPpwu3v
- TLSH T1B074AE9033AA4679C55D82BEE055124E43F4A52AE573EB857C8806EC9F8733CD78C29F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
lc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
lc.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target lc.exe
- Size 331KB
- SHA256 8cd02686e30e022dc5b7e759d5f00904f7c5c98fc8df86e8ab4ddf867054d4f5
- MD5 c379aa9ceb263088564e110b984ebdc8
- SHA1 df0c0ef6803ea4f881e72aa92f85cb9f1483a559
- SHA512 ac34ce30c3c8b35c354c39217969c42d56cfda1a5f94d2a4cc2a1d1afbbc06531180ee25d37418eed17f64566653e8df76341d2353a10a3eb0104934564c48bb
- SSDEEP 6144:xa0UKsyo7Np3SCpMW90KImQinnVbk6zEnQd/hwQBjrQi33v8U:xa0UKiNphPpwu3v
- TLSH T1B074AE9033AA4679C55D82BEE055124E43F4A52AE573EB857C8806EC9F8733CD78C29F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1