General
- Target WinLoad1.2_release.exe
- Size 12.5MB
- Sample260621-2spapsgx3w
- SHA256 2439d370558268ed19e9c43879cf301a4f384ac4a84e904a2a8ab6d1a5c7588f
- MD5 9191c3b859aa5df2be76d35cfd880750
- SHA1 0abb3a7f0f2457ecce54636601ed635fac36717a
- SHA512 3ff2292404c9b8d50ceeb6954e4134ffa03cde00313bdcce2331425237cd87b168e55162b6140b986d302041fd655e1f3ec5ed4ee5a80d271be0529cd703a663
- SSDEEP 393216:iS8Tn7/pwKnTPVEiUnu5eWbif4/eKf3aL7J8tRWA2PKxT:YzmaTPmoeckaeeM7J8FT
- TLSH T17BD6331AD6DD40BCE0B398F88D650116E67AF80957B1EADF43A47066CF7F260562CB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLoad1.2_release.exe
Resource
win11ltsc2024-20260617-en
17 signatures
300 seconds
Malware Config
Targets
-
- Target WinLoad1.2_release.exe
- Size 12.5MB
- SHA256 2439d370558268ed19e9c43879cf301a4f384ac4a84e904a2a8ab6d1a5c7588f
- MD5 9191c3b859aa5df2be76d35cfd880750
- SHA1 0abb3a7f0f2457ecce54636601ed635fac36717a
- SHA512 3ff2292404c9b8d50ceeb6954e4134ffa03cde00313bdcce2331425237cd87b168e55162b6140b986d302041fd655e1f3ec5ed4ee5a80d271be0529cd703a663
- SSDEEP 393216:iS8Tn7/pwKnTPVEiUnu5eWbif4/eKf3aL7J8tRWA2PKxT:YzmaTPmoeckaeeM7J8FT
- TLSH T17BD6331AD6DD40BCE0B398F88D650116E67AF80957B1EADF43A47066CF7F260562CB32
- MD5 SHA1 SHA512 SSDEEP TLSH
UAC bypass
Disables Task Manager via registry modification
Disables cmd.exe use via registry modification
Stops running service(s)
Adds Run key to start application
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1