General
- Target lc.exe
- Size 351KB
- Sample260623-vfd6msew4v
- SHA256 51c13dd60d648ccfc3914b5875190a5076f0523245256a99939d0631230d033a
- MD5 f31f4c8114ee91d5407e33a904102027
- SHA1 c5c08fcd8b82f400d0ba13c6b10d7188bfc21a12
- SHA512 4d53e316ed33a1855db38596ff8fb46e77d92563dcd80fbbf8cf2ea5ed0a28fb42241fbc4f1fbd9a53a956bdf8370319356550b08cb977b66f7418ae384d0880
- SSDEEP 6144:oriZUVxSCpMW90KImQinnVbbOnQd/hwQBjrQi33v8U:oXFpwu3v
- TLSH T19B74AF8817E24979C57DA3BFA0A0110A03F8B526DB43E79DFFD461E8AE27700CB55993
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
lc.exe
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
lc.exe
Resource
win11ltsc2024-20260618-en
19 signatures
300 seconds
Malware Config
Targets
-
- Target lc.exe
- Size 351KB
- SHA256 51c13dd60d648ccfc3914b5875190a5076f0523245256a99939d0631230d033a
- MD5 f31f4c8114ee91d5407e33a904102027
- SHA1 c5c08fcd8b82f400d0ba13c6b10d7188bfc21a12
- SHA512 4d53e316ed33a1855db38596ff8fb46e77d92563dcd80fbbf8cf2ea5ed0a28fb42241fbc4f1fbd9a53a956bdf8370319356550b08cb977b66f7418ae384d0880
- SSDEEP 6144:oriZUVxSCpMW90KImQinnVbbOnQd/hwQBjrQi33v8U:oXFpwu3v
- TLSH T19B74AF8817E24979C57DA3BFA0A0110A03F8B526DB43E79DFFD461E8AE27700CB55993
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
3