General
- Target ScoobyLoader.zip
- Size 8.2MB
- Sample260705-mcwmhsby51
- SHA256 a67ae954c3595034bca1ae56e9d2fda89f78cb36bccdc41041fea719fcb40749
- MD5 04436458c5575bf3215ece0040462087
- SHA1 de14d8dac93c6a041abecedcd458fe6a6eba6c82
- SHA512 654f47beddce4ef392be22404498ea9c456eb11338d40d6a4747457859617d16867a0d33b7c9843973b327c63e446837d627df76842eecec3bb5e341b9c34a31
- SSDEEP 196608:XDZZUvvWFZoMlbzmJHGYAzFrr1ea3/vsjbeS9Lo/:XDLxFZomzmJm7zZrEcvM9s
- TLSH T1BA8633343CB38A04A89DB3082CC27FA0DBF66DB7525978237D059F8E65FA52D08517E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ScoobyLoader.exe
Resource
win10v2004-20260513-en
22 signatures
600 seconds
Behavioral task
behavioral2
Sample
ScoobyLoader.exe
Resource
win11ltsc2024-20260629-en
2 signatures
600 seconds
Malware Config
Targets
-
- Target ScoobyLoader.exe
- Size 8.2MB
- SHA256 c945d733b8826ec8b4d61369454fb5a477ce35f8198db9d4ce5795de7a77377d
- MD5 28c36237860e52e57467a69b2fbf03af
- SHA1 12d2be8fe6dd323c6cb111919ae17e7e3e00a19b
- SHA512 edf45e27ab8f18e28eca4e1741fdc5f68e31a198983823ae5ab9fbaf33416d918a6e48d2bea106e4c229f93bc3480b3594ff1f5cbda5744aa42cc7dd0ca92f86
- SSDEEP 196608:R99OMiyt54Pab9+gKREaPC3GF+4dVhd2B7TrO8bS/OK1VX:Rn6ytCPab9+3Rbq2F+4/EOmK1V
- TLSH T16496338218F569EBE0C72C30614BBBD5D9DE7781D95A38E00F0BCAC005397D697EA257
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1