General
- Target support.client.exe
- Size 305KB
- Sample260623-qdgrjacz8p
- SHA256 1a27d360e4870f260abe8feb74ff71014954200fb83358eb49429ae7306c3836
- MD5 31e6b51f8ff1b0c429f68978e793b5bd
- SHA1 67eaddfcdd1d08f0afb9c6ea6cb035a73c103d00
- SHA512 3e927ac127fdd57d25ffb693ade4102f793f31c922c21717b286a3a330bd3da1ea120ae5f3be6f170450ed4e1f991017b408c6b750ebeed54d42876d086392f2
- SSDEEP 6144:ymlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9g:R1iw7gryNkSV1hy1Z1u2JLu9g
- TLSH T11A646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
support.client.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
support.client.exe
Resource
win11ltsc2024-20260617-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target support.client.exe
- Size 305KB
- SHA256 1a27d360e4870f260abe8feb74ff71014954200fb83358eb49429ae7306c3836
- MD5 31e6b51f8ff1b0c429f68978e793b5bd
- SHA1 67eaddfcdd1d08f0afb9c6ea6cb035a73c103d00
- SHA512 3e927ac127fdd57d25ffb693ade4102f793f31c922c21717b286a3a330bd3da1ea120ae5f3be6f170450ed4e1f991017b408c6b750ebeed54d42876d086392f2
- SSDEEP 6144:ymlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9g:R1iw7gryNkSV1hy1Z1u2JLu9g
- TLSH T11A646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
3Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1