General
- Target lab_analysis.exe
- Size 56KB
- Sample260702-2e1ftafx9w
- SHA256 8729ec65fb4bec80dd4dc84bc583c82f146fd255d887e322c8b6eacd3d9598b6
- MD5 1dad584e8249a72098ed66841fea3ff4
- SHA1 b46749c6b3a290225ffef7d9b59379087f6342aa
- SHA512 c5f3fbc73bf5529cf670ed82c22a62e8fb5e6333104bdf53faf8337804343df1aaa172825d887078add64d64b1e4fa9eee489ce2e3ab01e97c1d17d582a8542d
- SSDEEP 1536:cvR6WokOLcDEcHYMqmj1N9vkwx4xdH4CMr9AmGj7YbJ:c0zkbDEcHYMqwDkwx4xeFAmjbJ
- TLSH T16D43170AF2A324FCC65BC57845DB6A71FF71B85644746F3E8364CA321E30E542E2DA29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
lab_analysis.exe
Resource
win10v2004-20260513-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
lab_analysis.exe
Resource
win11ltsc2024-20260629-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target lab_analysis.exe
- Size 56KB
- SHA256 8729ec65fb4bec80dd4dc84bc583c82f146fd255d887e322c8b6eacd3d9598b6
- MD5 1dad584e8249a72098ed66841fea3ff4
- SHA1 b46749c6b3a290225ffef7d9b59379087f6342aa
- SHA512 c5f3fbc73bf5529cf670ed82c22a62e8fb5e6333104bdf53faf8337804343df1aaa172825d887078add64d64b1e4fa9eee489ce2e3ab01e97c1d17d582a8542d
- SSDEEP 1536:cvR6WokOLcDEcHYMqmj1N9vkwx4xdH4CMr9AmGj7YbJ:c0zkbDEcHYMqwDkwx4xeFAmjbJ
- TLSH T16D43170AF2A324FCC65BC57845DB6A71FF71B85644746F3E8364CA321E30E542E2DA29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1