General
- Target Leitostrap.exe
- Size 47.9MB
- Sample260628-l8bfsagv2z
- SHA256 d812a16d2d0b991bd7f2ce965143e154ffe236a513ad61583d421ecb25924f5e
- MD5 9ffb820739b1a992cfc0da8aba462ad3
- SHA1 37767b983eb2aa44e6751975b5edd33135261ca2
- SHA512 e1653884f5dcff2afb66ead7c9296588c21b62d0b068740762320d6642302cec7d14cc99e7fcf667381e5f72841ed8043bcf3343d92892572eb42084a0e94c3a
- SSDEEP 786432:w+gX4BMdhwzTQXR5FbPp3CYFcSS5U/LT2KVVyPVLIvdcWzbWlA68VCu0LhX5m43u:WXGMK4XR3b9CHSCU/+UyPlKcWzbWm6eR
- TLSH T18BB73312F2D409E5F9FB6A3497628341EB19749D8B31C1FB00E102535D7B9782B73AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Leitostrap.exe
Resource
win10v2004-20260513-en
26 signatures
150 seconds
Behavioral task
behavioral2
Sample
Leitostrap.exe
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Leitostrap.exe
- Size 47.9MB
- SHA256 d812a16d2d0b991bd7f2ce965143e154ffe236a513ad61583d421ecb25924f5e
- MD5 9ffb820739b1a992cfc0da8aba462ad3
- SHA1 37767b983eb2aa44e6751975b5edd33135261ca2
- SHA512 e1653884f5dcff2afb66ead7c9296588c21b62d0b068740762320d6642302cec7d14cc99e7fcf667381e5f72841ed8043bcf3343d92892572eb42084a0e94c3a
- SSDEEP 786432:w+gX4BMdhwzTQXR5FbPp3CYFcSS5U/LT2KVVyPVLIvdcWzbWlA68VCu0LhX5m43u:WXGMK4XR3b9CHSCU/+UyPlKcWzbWm6eR
- TLSH T18BB73312F2D409E5F9FB6A3497628341EB19749D8B31C1FB00E102535D7B9782B73AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
Enumerates processes with tasklist
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1