General
- Target support.client.exe
- Size 305KB
- Sample260627-apl8dsfx6t
- SHA256 d6dac4795a555ac174409e0fc911e18747284480c0e6f5f9f3d79b0bc1c30459
- MD5 17b6b52dad9d0f22946dc7151de3b206
- SHA1 c1caf85d8581425524e6906558a225ac4c7d45fc
- SHA512 6a6f217bb133207b1778f1ff820800f20cddea371e8b8c78c5d9ec6b7396abaee03bb6c0fc7d84bd01f8d96c42b6b144fe3ffcb1f8e62d918f7ef7528f012e90
- SSDEEP 6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:51iw7gryNkSV1hy1Z1u2JLu9
- TLSH T1FD646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
support.client.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
support.client.exe
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target support.client.exe
- Size 305KB
- SHA256 d6dac4795a555ac174409e0fc911e18747284480c0e6f5f9f3d79b0bc1c30459
- MD5 17b6b52dad9d0f22946dc7151de3b206
- SHA1 c1caf85d8581425524e6906558a225ac4c7d45fc
- SHA512 6a6f217bb133207b1778f1ff820800f20cddea371e8b8c78c5d9ec6b7396abaee03bb6c0fc7d84bd01f8d96c42b6b144fe3ffcb1f8e62d918f7ef7528f012e90
- SSDEEP 6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:51iw7gryNkSV1hy1Z1u2JLu9
- TLSH T1FD646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
3Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1