General
- Target SystemOptimizer.exe
- Size 7.8MB
- Sample260628-t3m7dsav4p
- SHA256 68aebcce57df9f6fffa52245f08b62beaf3c30f710d9526d64d943bb446648d8
- MD5 cf4f4576db106436865d8836325d66c9
- SHA1 b95dc00e7cb4112abca764fbe9e6b339e05cdeef
- SHA512 0ac96eef02d0d0801db367717b2f0928a4b76a4817ae8907313ea6ef3d5116c25e16861ea1e429ee45cf0e800081707a2c22453bf94aaf1f89646859bd1854df
- SSDEEP 196608:OBNTwhL3UIFeA1HeT39IigbauDXURuAEk0ax8ZGW:OWL3P1+TtIihuARuAUax6GW
- TLSH T187863395A3B204A9E9F6863A8276C11CE1A3708B4765D3DF17A006972F37BF01D3AF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SystemOptimizer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
SystemOptimizer.exe
Resource
win11ltsc2024-20260618-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target SystemOptimizer.exe
- Size 7.8MB
- SHA256 68aebcce57df9f6fffa52245f08b62beaf3c30f710d9526d64d943bb446648d8
- MD5 cf4f4576db106436865d8836325d66c9
- SHA1 b95dc00e7cb4112abca764fbe9e6b339e05cdeef
- SHA512 0ac96eef02d0d0801db367717b2f0928a4b76a4817ae8907313ea6ef3d5116c25e16861ea1e429ee45cf0e800081707a2c22453bf94aaf1f89646859bd1854df
- SSDEEP 196608:OBNTwhL3UIFeA1HeT39IigbauDXURuAEk0ax8ZGW:OWL3P1+TtIihuARuAUax6GW
- TLSH T187863395A3B204A9E9F6863A8276C11CE1A3708B4765D3DF17A006972F37BF01D3AF51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit
-
Possible privilege escalation attempt
-
Loads dropped DLL
-
Modifies file permissions
-
Drops file in System32 directory