General
- Target TDSSKiller.exe
- Size 4.0MB
- Sample260628-ajvycaet7k
- SHA256 8efd521df1f335af416dec15d5c0c6538903803aa1a8ed93aa704b384a29876b
- MD5 d40e7b5fbb8e0eaa7c5c294389af95ab
- SHA1 32189c4cd08c907710e3458ec8fbd92972d76537
- SHA512 c8e1fc21b3e4408277a8f6398eb3ffb88693081e656685d643c37ea0a1dab924818a07a554114a95ed8fc1afdb4efdc0f9cc6423cc2b9bf71cc49b53478224f4
- SSDEEP 98304:6fCcuw5sfsZyR96+Mw3tZS6jns8iYUlLy4ntOMVzmQR72:6fzruvsw3tZS6jnfClGgtx2
- TLSH T1EB163321E3128469DA30D435C9A86A753767ED3663200773FCA3FFC63A72BD1AA17215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
TDSSKiller.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
TDSSKiller.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target TDSSKiller.exe
- Size 4.0MB
- SHA256 8efd521df1f335af416dec15d5c0c6538903803aa1a8ed93aa704b384a29876b
- MD5 d40e7b5fbb8e0eaa7c5c294389af95ab
- SHA1 32189c4cd08c907710e3458ec8fbd92972d76537
- SHA512 c8e1fc21b3e4408277a8f6398eb3ffb88693081e656685d643c37ea0a1dab924818a07a554114a95ed8fc1afdb4efdc0f9cc6423cc2b9bf71cc49b53478224f4
- SSDEEP 98304:6fCcuw5sfsZyR96+Mw3tZS6jns8iYUlLy4ntOMVzmQR72:6fzruvsw3tZS6jnfClGgtx2
- TLSH T1EB163321E3128469DA30D435C9A86A753767ED3663200773FCA3FFC63A72BD1AA17215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Impair Defenses: Safe Mode Boot
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1