General
- Target NFA Manager (1).exe
- Size 73.0MB
- Sample260629-bn867sbs8q
- SHA256 4d8783e8c0d6c5bee3204de21858f6a3668771ed45055ccc5017a020a62ab789
- MD5 cba27787e52b3956998ccb7d51c33f29
- SHA1 21b5c23f714cf1100b5445308acdfb86e3dc69c3
- SHA512 412349729735fb6057e14d11c6d51b28e9ae2b09b0d8f3bf20aaef114bbe346c51bc59f8a067b8d98bd7b5abf2468331f0e11fdc32e89bd97ee0cb99b875e07a
- SSDEEP 1572864:14B9e7a+xBXaNZ5EMSA1MG3YfjfT112gGZSZj7k54mgTfl4qc:GB92a+xBXWU2M+qu0P837
- TLSH T1ECF72356E2F900E8D5BAC0B8C5571517E7B23C5517309BEF61A4AA692F33BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NFA Manager (1).exe
Resource
win10ltsc2021-20260513-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target NFA Manager (1).exe
- Size 73.0MB
- SHA256 4d8783e8c0d6c5bee3204de21858f6a3668771ed45055ccc5017a020a62ab789
- MD5 cba27787e52b3956998ccb7d51c33f29
- SHA1 21b5c23f714cf1100b5445308acdfb86e3dc69c3
- SHA512 412349729735fb6057e14d11c6d51b28e9ae2b09b0d8f3bf20aaef114bbe346c51bc59f8a067b8d98bd7b5abf2468331f0e11fdc32e89bd97ee0cb99b875e07a
- SSDEEP 1572864:14B9e7a+xBXaNZ5EMSA1MG3YfjfT112gGZSZj7k54mgTfl4qc:GB92a+xBXWU2M+qu0P837
- TLSH T1ECF72356E2F900E8D5BAC0B8C5571517E7B23C5517309BEF61A4AA692F33BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2