General
- Target 8b7985611e048269a950d62a49f7164dc7f5c15ef07cc0a6129c14e93cbb584f
- Size 5.0MB
- Sample260706-e7r9kshy4s
- SHA256 8b7985611e048269a950d62a49f7164dc7f5c15ef07cc0a6129c14e93cbb584f
- MD5 bb3e64afc5589fe9bbc962ec977b1c11
- SHA1 1bdb5f8d6312088ebb66c37e780ad68b378af146
- SHA512 399f5a5a1944229ac01712aecc4ff34c84d339e6beca687cfff8c8a63c7f7df393da554f5a999fd39f3006740d9cdbfe6aed788a8a1a0e7d2c3a6e1cc8ee4336
- SSDEEP 98304:RT14DeBlggvv3CKHhH/Kq1jr5QjQvdHZPH/0/4ry1N5oS5:/4anguvzhHWKdHl0Yy1Nn5
- TLSH T1BE36BF12FA804072E5B3413882BAA77B897DBD201724D5C763E42D7A4E716D27B3E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8b7985611e048269a950d62a49f7164dc7f5c15ef07cc0a6129c14e93cbb584f.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
8b7985611e048269a950d62a49f7164dc7f5c15ef07cc0a6129c14e93cbb584f.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 8b7985611e048269a950d62a49f7164dc7f5c15ef07cc0a6129c14e93cbb584f
- Size 5.0MB
- SHA256 8b7985611e048269a950d62a49f7164dc7f5c15ef07cc0a6129c14e93cbb584f
- MD5 bb3e64afc5589fe9bbc962ec977b1c11
- SHA1 1bdb5f8d6312088ebb66c37e780ad68b378af146
- SHA512 399f5a5a1944229ac01712aecc4ff34c84d339e6beca687cfff8c8a63c7f7df393da554f5a999fd39f3006740d9cdbfe6aed788a8a1a0e7d2c3a6e1cc8ee4336
- SSDEEP 98304:RT14DeBlggvv3CKHhH/Kq1jr5QjQvdHZPH/0/4ry1N5oS5:/4anguvzhHWKdHl0Yy1Nn5
- TLSH T1BE36BF12FA804072E5B3413882BAA77B897DBD201724D5C763E42D7A4E716D27B3E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1