General
- Target netlimiter-5.3.21.0.exe
- Size 10.3MB
- Sample260705-mazldsby3s
- SHA256 1783c6bf7110c5d4d5afa1255f1c49e96d0a2a69b0bde9541f6b67856d31b868
- MD5 80cc3dbe8f007ff8e16efe2840091ac2
- SHA1 d7d55b9dccf45712174727d291415f8ed436e154
- SHA512 1bfd440b68c61f0b89c34c5d15f009b7095f34e2ad8f6fc5e16333d0acedae955071c61481ae736caff7588e3f19093e67d2bbe04488965f14b161bafa04446d
- SSDEEP 196608:b5gk9KH9qVlY4f7C5zfnT56TibqEE2kIe761qYwAIe2y13NWV:SeKd14mt96T6qErm61qYwAIe1HWV
- TLSH T17DB6E0617646C827C56F01B0D52CDA9A71286E610B6D54CB73CC2E2E3A747C236FEE17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
netlimiter-5.3.21.0.exe
Resource
win11ltsc2024-20260629-en
25 signatures
900 seconds
Malware Config
Targets
-
- Target netlimiter-5.3.21.0.exe
- Size 10.3MB
- SHA256 1783c6bf7110c5d4d5afa1255f1c49e96d0a2a69b0bde9541f6b67856d31b868
- MD5 80cc3dbe8f007ff8e16efe2840091ac2
- SHA1 d7d55b9dccf45712174727d291415f8ed436e154
- SHA512 1bfd440b68c61f0b89c34c5d15f009b7095f34e2ad8f6fc5e16333d0acedae955071c61481ae736caff7588e3f19093e67d2bbe04488965f14b161bafa04446d
- SSDEEP 196608:b5gk9KH9qVlY4f7C5zfnT56TibqEE2kIe761qYwAIe2y13NWV:SeKd14mt96T6qErm61qYwAIe1HWV
- TLSH T17DB6E0617646C827C56F01B0D52CDA9A71286E610B6D54CB73CC2E2E3A747C236FEE17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
4Subvert Trust Controls
1Install Root Certificate
1