General
- Target WinLoad1.2_release.exe
- Size 12.5MB
- Sample260621-2spapsgx3w
- SHA256 2439d370558268ed19e9c43879cf301a4f384ac4a84e904a2a8ab6d1a5c7588f
- MD5 9191c3b859aa5df2be76d35cfd880750
- SHA1 0abb3a7f0f2457ecce54636601ed635fac36717a
- SHA512 3ff2292404c9b8d50ceeb6954e4134ffa03cde00313bdcce2331425237cd87b168e55162b6140b986d302041fd655e1f3ec5ed4ee5a80d271be0529cd703a663
- SSDEEP 393216:iS8Tn7/pwKnTPVEiUnu5eWbif4/eKf3aL7J8tRWA2PKxT:YzmaTPmoeckaeeM7J8FT
- TLSH T17BD6331AD6DD40BCE0B398F88D650116E67AF80957B1EADF43A47066CF7F260562CB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLoad1.2_release.exe
Resource
win11ltsc2024-20260617-en
17 signatures
300 seconds
Malware Config
Targets
-
- Target WinLoad1.2_release.exe
- Size 12.5MB
- SHA256 2439d370558268ed19e9c43879cf301a4f384ac4a84e904a2a8ab6d1a5c7588f
- MD5 9191c3b859aa5df2be76d35cfd880750
- SHA1 0abb3a7f0f2457ecce54636601ed635fac36717a
- SHA512 3ff2292404c9b8d50ceeb6954e4134ffa03cde00313bdcce2331425237cd87b168e55162b6140b986d302041fd655e1f3ec5ed4ee5a80d271be0529cd703a663
- SSDEEP 393216:iS8Tn7/pwKnTPVEiUnu5eWbif4/eKf3aL7J8tRWA2PKxT:YzmaTPmoeckaeeM7J8FT
- TLSH T17BD6331AD6DD40BCE0B398F88D650116E67AF80957B1EADF43A47066CF7F260562CB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Disables Task Manager via registry modification
-
Disables cmd.exe use via registry modification
-
Stops running service(s)
-
Adds Run key to start application
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1