General
- Target SofMainFN.exe
- Size 1.1MB
- Sample260624-st2sradt4k
- SHA256 8c6fe3f86acd5ad2f16486c6775d8849918da62e215ed5a4d8f024ca202964b9
- MD5 9b0e51a01fb0e850033fb18ec1ecd3f8
- SHA1 e3b71035cbe573373e7fe11ca7dbe6a25c047ffc
- SHA512 536409c783420fdcf8ff8e099388348bd55f4a3704d22e8cefcabd5d63a15b12ba5f1e27a0f48a5cc571985cd454930f0c7303b8db9bddfe742d6bd34b81d404
- SSDEEP 12288:13MB+5dNyLqnyu7uowLuWMGAEJi+eQn0Jj8yKq8IHgEQnd3nQ3Mx:awf3qLu78Sl8XIwnd3Q
- TLSH T1AB456C02ED107065E5A00B390C9B8FFF6E777D0627265BC77F882BCF4A8658945AE712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SofMainFN.exe
Resource
win10v2004-20260513-en
7 signatures
30 seconds
Malware Config
Targets
-
- Target SofMainFN.exe
- Size 1.1MB
- SHA256 8c6fe3f86acd5ad2f16486c6775d8849918da62e215ed5a4d8f024ca202964b9
- MD5 9b0e51a01fb0e850033fb18ec1ecd3f8
- SHA1 e3b71035cbe573373e7fe11ca7dbe6a25c047ffc
- SHA512 536409c783420fdcf8ff8e099388348bd55f4a3704d22e8cefcabd5d63a15b12ba5f1e27a0f48a5cc571985cd454930f0c7303b8db9bddfe742d6bd34b81d404
- SSDEEP 12288:13MB+5dNyLqnyu7uowLuWMGAEJi+eQn0Jj8yKq8IHgEQnd3nQ3Mx:awf3qLu78Sl8XIwnd3Q
- TLSH T1AB456C02ED107065E5A00B390C9B8FFF6E777D0627265BC77F882BCF4A8658945AE712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1