General
- Target deerhunter.exe
- Size 79.2MB
- Sample260628-pdwp1sgz4t
- SHA256 47acac8f0d199a9ac98f8c1c45cd166b0d15b62714528db92aa63222989424b6
- MD5 146253c790f7469343eae7cff9119b89
- SHA1 ecd187f2e5b071a575e12f08b86e1b6a88300b7d
- SHA512 5dd21bca47b5972e5fbe032c4caca58e6355921ed4ee0e34e669c988afd1299dcf8584fc7df8deab0704023b9bc761678cb336873c4ab4ab2fa6694b3cafc756
- SSDEEP 786432:fMguj8Q4VfvUqFTrYUGKTa2nQL6woDH9Del:fiAQIHUkH0+vbVel
- TLSH T13A087B0263A90571D2F7927056B642139AB1B80773F08DCBB91C43242FC7BF6BA7AB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
deerhunter.exe
Resource
win11ltsc2024-20260617-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target deerhunter.exe
- Size 79.2MB
- SHA256 47acac8f0d199a9ac98f8c1c45cd166b0d15b62714528db92aa63222989424b6
- MD5 146253c790f7469343eae7cff9119b89
- SHA1 ecd187f2e5b071a575e12f08b86e1b6a88300b7d
- SHA512 5dd21bca47b5972e5fbe032c4caca58e6355921ed4ee0e34e669c988afd1299dcf8584fc7df8deab0704023b9bc761678cb336873c4ab4ab2fa6694b3cafc756
- SSDEEP 786432:fMguj8Q4VfvUqFTrYUGKTa2nQL6woDH9Del:fiAQIHUkH0+vbVel
- TLSH T13A087B0263A90571D2F7927056B642139AB1B80773F08DCBB91C43242FC7BF6BA7AB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Enumerates processes with tasklist
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1