General
- Target hello22.exe
- Size 30.9MB
- Sample260706-mhydashy3r
- SHA256 110b0199c9adadc0fba7b6c8be09b54f37bf736fb694ddd41a28dffbacb9b207
- MD5 79fae9745b84085b138bd5a80d610d45
- SHA1 5eafe9ab0f8e2c0f9a1b6886aa83ef46bc24dde2
- SHA512 b3566e6177c5a5223b5cd72e6b77adf9d3fb6de50db4b30df4eeb97e5156189aa2a9e06818b373c6b9b0d5191c1d977b28449f88996b84c690740d0989081ffb
- SSDEEP 786432:L2G4TLcNOCXEx2rgKvuToWAGWJtZq5s/fwt7ec9/g:ITIAC82rL0oZ5Dq5s3wNzxg
- TLSH T19167336923900867EA9163789DD1BB79C3E263F03E30878F17D519A67EA77894C39370
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
hello22.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
hello22.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target hello22.exe
- Size 30.9MB
- SHA256 110b0199c9adadc0fba7b6c8be09b54f37bf736fb694ddd41a28dffbacb9b207
- MD5 79fae9745b84085b138bd5a80d610d45
- SHA1 5eafe9ab0f8e2c0f9a1b6886aa83ef46bc24dde2
- SHA512 b3566e6177c5a5223b5cd72e6b77adf9d3fb6de50db4b30df4eeb97e5156189aa2a9e06818b373c6b9b0d5191c1d977b28449f88996b84c690740d0989081ffb
- SSDEEP 786432:L2G4TLcNOCXEx2rgKvuToWAGWJtZq5s/fwt7ec9/g:ITIAC82rL0oZ5Dq5s3wNzxg
- TLSH T19167336923900867EA9163789DD1BB79C3E263F03E30878F17D519A67EA77894C39370
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates processes with tasklist
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1