General
- Target havoc.exe
- Size 889KB
- Sample260620-bhzetady51
- SHA256 76e5159294bba3cd3ae35fef8cbb6924799fdd8c177a1598878b607b63ea07df
- MD5 126aab76902c2a7a64edfda101c721df
- SHA1 80dfa95941d71b591b9018731fee09a6db5dda44
- SHA512 fd3236bddce090e045ebfbbd08146ab952c7f69815c22f900a0fe139a793471aa52fd98ed5f9cea655dd6aa4f269e4277a0f049c402dc109606ef2aeecb81834
- SSDEEP 12288:zN+s8h09ZdnutGugvl7wyPpaolwnmULjLm2OZEKsRg6q1NIhSd:zNr00nPLwJolwnmYfI6iNIhc
- TLSH T1E715BE45E1F580ACC0ABE534EA96A61BFA3738440730B2DBA3E4585D1FE27F4A779311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
havoc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
havoc.exe
Resource
win11ltsc2024-20260617-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target havoc.exe
- Size 889KB
- SHA256 76e5159294bba3cd3ae35fef8cbb6924799fdd8c177a1598878b607b63ea07df
- MD5 126aab76902c2a7a64edfda101c721df
- SHA1 80dfa95941d71b591b9018731fee09a6db5dda44
- SHA512 fd3236bddce090e045ebfbbd08146ab952c7f69815c22f900a0fe139a793471aa52fd98ed5f9cea655dd6aa4f269e4277a0f049c402dc109606ef2aeecb81834
- SSDEEP 12288:zN+s8h09ZdnutGugvl7wyPpaolwnmULjLm2OZEKsRg6q1NIhSd:zNr00nPLwJolwnmYfI6iNIhc
- TLSH T1E715BE45E1F580ACC0ABE534EA96A61BFA3738440730B2DBA3E4585D1FE27F4A779311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1