General
- Target 2026-07-01_0a86dc72fffe3ecbbedb378726fb51e8_hive
- Size 33.3MB
- Sample260701-mtds2aes5w
- SHA256 9dca68b0accb0d32505b06af57ffcd53a29e304542237d121c952a311bc9f816
- MD5 0a86dc72fffe3ecbbedb378726fb51e8
- SHA1 9d1bda1e3886f81fab737483def742e09151c927
- SHA512 44019d710635d0c236e46a00996c2049bae094d8babfcd81f84d3b38ae22c0b0728383b951c19d6176fe5c00c2e32bdd43358558d66f970a6d7e7cd5d80def25
- SSDEEP 786432:L/w5SmsbC7tz5otY2O9azBtWhMkrJHTnF79TPuLlAiZ:L4wmf7EtPPzHWhFrJHh79yLfZ
- TLSH T103773338D479B500CA5B6CF231FD23550DA3895E26BCC27F89B89371BAB4587A379C60
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_0a86dc72fffe3ecbbedb378726fb51e8_hive.exe
Resource
win10v2004-20260513-en
27 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0a86dc72fffe3ecbbedb378726fb51e8_hive.exe
Resource
win11ltsc2024-20260629-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0a86dc72fffe3ecbbedb378726fb51e8_hive
- Size 33.3MB
- SHA256 9dca68b0accb0d32505b06af57ffcd53a29e304542237d121c952a311bc9f816
- MD5 0a86dc72fffe3ecbbedb378726fb51e8
- SHA1 9d1bda1e3886f81fab737483def742e09151c927
- SHA512 44019d710635d0c236e46a00996c2049bae094d8babfcd81f84d3b38ae22c0b0728383b951c19d6176fe5c00c2e32bdd43358558d66f970a6d7e7cd5d80def25
- SSDEEP 786432:L/w5SmsbC7tz5otY2O9azBtWhMkrJHTnF79TPuLlAiZ:L4wmf7EtPPzHWhFrJHh79yLfZ
- TLSH T103773338D479B500CA5B6CF231FD23550DA3895E26BCC27F89B89371BAB4587A379C60
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2