General
- Target Expectional.exe
- Size 2.4MB
- Sample260705-wbn1qaew2s
- SHA256 5dd6f972f502c375c787494798c63fc56d20adb0e42a06415364990a891bd4df
- MD5 2918d518315246bfb182c76dbc06a419
- SHA1 71211c528bf3770328615e9b3ba8dcc31e67de61
- SHA512 7a250bc224a6bc059b5a99080ee41e4157e0a4be6235fc8d2f75d2b087622e2828feb1dc9c41b062d3c494dc1bc434a96a5855a709a62e85645949dc4728972e
- SSDEEP 49152:sK+EcV+GJbwNfRGLM4TFTuZ2ALNf4Sn3LwSqXvIuttYzPHst:sguGLQvttYzP
- TLSH T155C58D0161B06098C056E0B0C663E613D73534070724DADF77AFFA566F23DE29AFA69B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Expectional.exe
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Malware Config
Targets
-
- Target Expectional.exe
- Size 2.4MB
- SHA256 5dd6f972f502c375c787494798c63fc56d20adb0e42a06415364990a891bd4df
- MD5 2918d518315246bfb182c76dbc06a419
- SHA1 71211c528bf3770328615e9b3ba8dcc31e67de61
- SHA512 7a250bc224a6bc059b5a99080ee41e4157e0a4be6235fc8d2f75d2b087622e2828feb1dc9c41b062d3c494dc1bc434a96a5855a709a62e85645949dc4728972e
- SSDEEP 49152:sK+EcV+GJbwNfRGLM4TFTuZ2ALNf4Sn3LwSqXvIuttYzPHst:sguGLQvttYzP
- TLSH T155C58D0161B06098C056E0B0C663E613D73534070724DADF77AFFA566F23DE29AFA69B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1