General
- Target Real Executor_39936735.exe
- Size 583KB
- Sample260625-sba73sc14n
- SHA256 ddbd930cf742882ea6cc10ea5495f8aec24003664b81257c1b3900f3627b6684
- MD5 7392e839c67ba537093c55353be265ba
- SHA1 7c9bce283d6eb9b49dcdcc850e66e0148dc30d71
- SHA512 07ccf85180c1d63cc03f9d0ff986d0c704f1ac7719e6f7bec56d32f397eb4400a623a19954914b1d391270ce0b08226ee48f92462c7ec2b6ee29500a36ca0617
- SSDEEP 12288:w7yjhihTaVWs+OfaOp0XWgWasfMJo7WLrc7SrnTGf0TRz4hTB2eLsHjlsGk8y:yyjz99asfnyNrnTe0TShhLijlsGJy
- TLSH T132D49E123592C036C5B111B01929EFA690BEBD344F7245DBA7D41B2EDB346F26F31A3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Real Executor_39936735.exe
Resource
win11-20260513-de
29 signatures
150 seconds
Behavioral task
behavioral2
Sample
Real Executor_39936735.exe
Resource
win11ltsc2024-20260617-de
16 signatures
150 seconds
Malware Config
Targets
-
- Target Real Executor_39936735.exe
- Size 583KB
- SHA256 ddbd930cf742882ea6cc10ea5495f8aec24003664b81257c1b3900f3627b6684
- MD5 7392e839c67ba537093c55353be265ba
- SHA1 7c9bce283d6eb9b49dcdcc850e66e0148dc30d71
- SHA512 07ccf85180c1d63cc03f9d0ff986d0c704f1ac7719e6f7bec56d32f397eb4400a623a19954914b1d391270ce0b08226ee48f92462c7ec2b6ee29500a36ca0617
- SSDEEP 12288:w7yjhihTaVWs+OfaOp0XWgWasfMJo7WLrc7SrnTGf0TRz4hTB2eLsHjlsGk8y:yyjz99asfnyNrnTe0TShhLijlsGJy
- TLSH T132D49E123592C036C5B111B01929EFA690BEBD344F7245DBA7D41B2EDB346F26F31A3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
3Install Root Certificate
2SIP and Trust Provider Hijacking
1