General
- Target keylogger.exe
- Size 142KB
- Sample260627-bxn8dsf19v
- SHA256 d4ae3023e9659e145c533f61a724b08ef6ed56b3fa02865c8a80fccce3129d9d
- MD5 8a7dc9310ee7df5a163cf03d73408186
- SHA1 ca3dc9b5e1e819ad2aa621808c0a20e753eaee04
- SHA512 f0c322c07ac0f19e0751da825046cd88517d51643c5c24c871b26619f09a4052687d6fe251d91e0963fb3af84fb520545133646e409d6f2678e7078b906968e7
- SSDEEP 1536:WezLlkkbwLwU2kLMVglgTEAHzPJOZWhLNM5zQ6/tSJJQBxR6guzN20jzYybbOeiy:WezL2ObUHLM7xMDSaburj0yvSVf4
- TLSH T161E32AC5BAC59DD7EA14423C85AB832A263CF6C587838B135834B6310F13AD17DDB66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
keylogger.exe
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
keylogger.exe
Resource
win11ltsc2024-20260617-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target keylogger.exe
- Size 142KB
- SHA256 d4ae3023e9659e145c533f61a724b08ef6ed56b3fa02865c8a80fccce3129d9d
- MD5 8a7dc9310ee7df5a163cf03d73408186
- SHA1 ca3dc9b5e1e819ad2aa621808c0a20e753eaee04
- SHA512 f0c322c07ac0f19e0751da825046cd88517d51643c5c24c871b26619f09a4052687d6fe251d91e0963fb3af84fb520545133646e409d6f2678e7078b906968e7
- SSDEEP 1536:WezLlkkbwLwU2kLMVglgTEAHzPJOZWhLNM5zQ6/tSJJQBxR6guzN20jzYybbOeiy:WezL2ObUHLM7xMDSaburj0yvSVf4
- TLSH T161E32AC5BAC59DD7EA14423C85AB832A263CF6C587838B135834B6310F13AD17DDB66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1