General
- Target AdBlock360Setup.exe
- Size 736KB
- Sample260620-slps8afw6r
- SHA256 185871e2adf8bd4577391f215d7d8cb8ebc3332b173f935e0cf421bb4f8de591
- MD5 e38db44c7a70cb0efa2d95b7e1958394
- SHA1 0b0e155f56777f0b86106fd2da379baec0cb1d47
- SHA512 eeaa4f8e4ddccab02380de7c53c43ea181bea1bd22cc5674b086f2fd54672716b3d3b85b51bcff7e2044d806b57e075d7b4d41c9f1f09c58964ef9cc8bd06246
- SSDEEP 12288:9EoX5Mw6IOEXkSY4Cr23ph0lhSMXli3B7dw5qKp:9E+MgOEUSHCS5h0lhSMXlkB5wYS
- TLSH T173F48C15E7B440F9E0A6C275896A497AFB727C8743A8974F03B0665E1F376980E3E331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AdBlock360Setup.exe
Resource
win10ltsc2021-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target AdBlock360Setup.exe
- Size 736KB
- SHA256 185871e2adf8bd4577391f215d7d8cb8ebc3332b173f935e0cf421bb4f8de591
- MD5 e38db44c7a70cb0efa2d95b7e1958394
- SHA1 0b0e155f56777f0b86106fd2da379baec0cb1d47
- SHA512 eeaa4f8e4ddccab02380de7c53c43ea181bea1bd22cc5674b086f2fd54672716b3d3b85b51bcff7e2044d806b57e075d7b4d41c9f1f09c58964ef9cc8bd06246
- SSDEEP 12288:9EoX5Mw6IOEXkSY4Cr23ph0lhSMXli3B7dw5qKp:9E+MgOEUSHCS5h0lhSMXlkB5wYS
- TLSH T173F48C15E7B440F9E0A6C275896A497AFB727C8743A8974F03B0665E1F376980E3E331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in Drivers directory
-
Stops running service(s)
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1