General
- Target OpenedFilesView.exe
- Size 203KB
- Sample260628-ep5ryse18k
- SHA256 bfb1a374772cccc06440ee3def14d6556d3b51c9e6de95b69917798b235e733b
- MD5 7fd126c4884e6d837e2ba80208163cfe
- SHA1 ffab981438712d1f5ac681e3ada1c9251efb4134
- SHA512 031559ff5b92961ef1575dbe2a5314c91c9712c655d4356d6842aacd6a026be7993bdf5691d2f6440b0a829609ba939acaa5de297162123ed312cfcfb69eca67
- SSDEEP 3072:QXRdWqpqvtcwEJrwBvqxuCwcZ29O2653UblfQyR5Tc1e8aMRVUDh0v+U:sJqmlJ529OHmRg1e9I3
- TLSH T1DA144A4673F81198E4B7DA74C9B24A23DBF1B8545A30C35F0BA0899A1F23791FE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OpenedFilesView.exe
Resource
win10v2004-20260513-en
5 signatures
60 seconds
Malware Config
Targets
-
- Target OpenedFilesView.exe
- Size 203KB
- SHA256 bfb1a374772cccc06440ee3def14d6556d3b51c9e6de95b69917798b235e733b
- MD5 7fd126c4884e6d837e2ba80208163cfe
- SHA1 ffab981438712d1f5ac681e3ada1c9251efb4134
- SHA512 031559ff5b92961ef1575dbe2a5314c91c9712c655d4356d6842aacd6a026be7993bdf5691d2f6440b0a829609ba939acaa5de297162123ed312cfcfb69eca67
- SSDEEP 3072:QXRdWqpqvtcwEJrwBvqxuCwcZ29O2653UblfQyR5Tc1e8aMRVUDh0v+U:sJqmlJ529OHmRg1e9I3
- TLSH T1DA144A4673F81198E4B7DA74C9B24A23DBF1B8545A30C35F0BA0899A1F23791FE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1