General
- Target SystemOptimizer.exe
- Size 7.8MB
- Sample260628-t5tf7aav6l
- SHA256 68aebcce57df9f6fffa52245f08b62beaf3c30f710d9526d64d943bb446648d8
- MD5 cf4f4576db106436865d8836325d66c9
- SHA1 b95dc00e7cb4112abca764fbe9e6b339e05cdeef
- SHA512 0ac96eef02d0d0801db367717b2f0928a4b76a4817ae8907313ea6ef3d5116c25e16861ea1e429ee45cf0e800081707a2c22453bf94aaf1f89646859bd1854df
- SSDEEP 196608:OBNTwhL3UIFeA1HeT39IigbauDXURuAEk0ax8ZGW:OWL3P1+TtIihuARuAUax6GW
- TLSH T187863395A3B204A9E9F6863A8276C11CE1A3708B4765D3DF17A006972F37BF01D3AF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SystemOptimizer.exe
Resource
win10ltsc2021-20260513-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
SystemOptimizer.exe
Resource
win11-20260513-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target SystemOptimizer.exe
- Size 7.8MB
- SHA256 68aebcce57df9f6fffa52245f08b62beaf3c30f710d9526d64d943bb446648d8
- MD5 cf4f4576db106436865d8836325d66c9
- SHA1 b95dc00e7cb4112abca764fbe9e6b339e05cdeef
- SHA512 0ac96eef02d0d0801db367717b2f0928a4b76a4817ae8907313ea6ef3d5116c25e16861ea1e429ee45cf0e800081707a2c22453bf94aaf1f89646859bd1854df
- SSDEEP 196608:OBNTwhL3UIFeA1HeT39IigbauDXURuAEk0ax8ZGW:OWL3P1+TtIihuARuAUax6GW
- TLSH T187863395A3B204A9E9F6863A8276C11CE1A3708B4765D3DF17A006972F37BF01D3AF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
Modifies boot configuration data using bcdedit
Possible privilege escalation attempt
Loads dropped DLL
Modifies file permissions
Drops file in System32 directory