General
- Target SysHealthStrayX64.exe
- Size 76.1MB
- Sample260623-mbmm8acs2s
- SHA256 0d3c47a7a9c55e6848570e58e2478d07983fc557ccf729d9e9df788584ff5b4f
- MD5 657e47ac233f61d89c0a3c568eeae883
- SHA1 3f4e91144ede163ae43888d3c129e65bb1b1fdd4
- SHA512 6ebf5e44c33d725fb9e8ced6d93d9276d63932a1e414284601193153591d3a2727584d07d84e4ffd33a66d910b5f0efaf55da54705976c32499c86ffe4847010
- SSDEEP 1572864:qqPndpm+vWlM9ojCrD4WWJvKSc/JUNnd1Y60oZ6xEjM7y6niiPRgzeHpxR:/helKbDSc/iFJpiPXpx
- TLSH T1590833894E41CC6BE91CD1329AE16D66D5B76C582E434E4707E40A793FEB3C88D7EE20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
SysHealthStrayX64.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target SysHealthStrayX64.exe
- Size 76.1MB
- SHA256 0d3c47a7a9c55e6848570e58e2478d07983fc557ccf729d9e9df788584ff5b4f
- MD5 657e47ac233f61d89c0a3c568eeae883
- SHA1 3f4e91144ede163ae43888d3c129e65bb1b1fdd4
- SHA512 6ebf5e44c33d725fb9e8ced6d93d9276d63932a1e414284601193153591d3a2727584d07d84e4ffd33a66d910b5f0efaf55da54705976c32499c86ffe4847010
- SSDEEP 1572864:qqPndpm+vWlM9ojCrD4WWJvKSc/JUNnd1Y60oZ6xEjM7y6niiPRgzeHpxR:/helKbDSc/iFJpiPXpx
- TLSH T1590833894E41CC6BE91CD1329AE16D66D5B76C582E434E4707E40A793FEB3C88D7EE20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Adds policy Run key to start application
-
Drops file in Drivers directory
-
Drops startup file
-
Loads dropped DLL
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Boot or Logon Initialization Scripts
1Logon Script (Windows)
1