General
- Target WindowsUpdate.exe
- Size 18.2MB
- Sample260620-k8jaysft3x
- SHA256 1be14cc1883eab57b838b6ee895c92f1f8cbe951bb9db05c4a4b3cd296c70704
- MD5 1c4916f3209e2c82c1831917b1837420
- SHA1 bc00cb9c334a3426c7c9d06427da2d3424960de4
- SHA512 953cd3e2515ddda2e484e0d561d9b451e549ac71d81e820a26fc10c67295bd4a262c0d99312ea10a6fbfc1de7118585b3d528774bb5407c208c9941ebc82104b
- SSDEEP 393216:5Tr2DS8BG+u6fb+SJ8aqq1CPwDvt3uFhCas4eBM609Bu:5T6DS8BLgBu
- TLSH T162177C5176908466F8B6F279C5170606E370ECB16720C7CB319DB2691F37BE12EBA6C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WindowsUpdate.exe
Resource
win10ltsc2021-20260513-en
8 signatures
600 seconds
Behavioral task
behavioral2
Sample
WindowsUpdate.exe
Resource
win11-20260513-en
10 signatures
600 seconds
Malware Config
Targets
-
- Target WindowsUpdate.exe
- Size 18.2MB
- SHA256 1be14cc1883eab57b838b6ee895c92f1f8cbe951bb9db05c4a4b3cd296c70704
- MD5 1c4916f3209e2c82c1831917b1837420
- SHA1 bc00cb9c334a3426c7c9d06427da2d3424960de4
- SHA512 953cd3e2515ddda2e484e0d561d9b451e549ac71d81e820a26fc10c67295bd4a262c0d99312ea10a6fbfc1de7118585b3d528774bb5407c208c9941ebc82104b
- SSDEEP 393216:5Tr2DS8BG+u6fb+SJ8aqq1CPwDvt3uFhCas4eBM609Bu:5T6DS8BLgBu
- TLSH T162177C5176908466F8B6F279C5170606E370ECB16720C7CB319DB2691F37BE12EBA6C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Loads dropped DLL