General
- Target tmpjyr6hbop
- Size 228KB
- Sample260702-n3khlsfy4l
- SHA256 696b2e8b23219a1631c1393d071f08bd8418c1af97f6614e2ee1be99546c07f9
- MD5 648b11e3749a10e4e905e608b682547e
- SHA1 84868c171023efdc372d21cce1b252924fcbee9f
- SHA512 61a00570def830a9865db2876258803695a15dbbbab02be5b14f4a6764aa27e08385d719e9f3818d0ec7ec87e6a51e2828c375eaa227af1784a6b2fe2faa88bb
- SSDEEP 6144:zWcp5KM1PtxwdZ7Lb/s1g4MWrUSiWxiuKNiMaj+C5MHDG8:zWI0sPtxaR/s1g4MWrUSiWxiuKNiMajP
- TLSH T1B834BA9D726072DFC857D472DEA82C68EA6074BB931F4203A42715ADEE4D897DF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
tmpjyr6hbop.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpjyr6hbop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpjyr6hbop.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmpjyr6hbop
- Size 228KB
- SHA256 696b2e8b23219a1631c1393d071f08bd8418c1af97f6614e2ee1be99546c07f9
- MD5 648b11e3749a10e4e905e608b682547e
- SHA1 84868c171023efdc372d21cce1b252924fcbee9f
- SHA512 61a00570def830a9865db2876258803695a15dbbbab02be5b14f4a6764aa27e08385d719e9f3818d0ec7ec87e6a51e2828c375eaa227af1784a6b2fe2faa88bb
- SSDEEP 6144:zWcp5KM1PtxwdZ7Lb/s1g4MWrUSiWxiuKNiMaj+C5MHDG8:zWI0sPtxaR/s1g4MWrUSiWxiuKNiMajP
- TLSH T1B834BA9D726072DFC857D472DEA82C68EA6074BB931F4203A42715ADEE4D897DF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1