General
- Target Helper.exe
- Size 73.4MB
- Sample260706-vz4weaas4y
- SHA256 d6e32f4893e4ddc8a5aba356a8cfefc3d4ec56cda9c7ec918e3c57350b96e36a
- MD5 e6f34163fab9cb171d2ca0e7fd111211
- SHA1 52b97cb571eda097d0fb95c21f07ba5ed130b60e
- SHA512 9edb1686590e06ab81492bcba0d5742d75c8245ea4ecc4ace0672f847a698fd63f8bf0db59b169f4d1a0052e485b1f09676c22d6d5bcb0b9510542efa08c3e49
- SSDEEP 1572864:E/zKWSnAW8Iw8ZIG45r97DTJVj8/B62U9tTvov3UvhDb3AN:sZoAW8IwYUH7T2U9tTvovgxbwN
- TLSH T1E0F72332F74040B6D4EB4271959BA716EE787922073046CB5254CAA5EF337E23F3A729
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Helper.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Helper.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Helper.exe
- Size 73.4MB
- SHA256 d6e32f4893e4ddc8a5aba356a8cfefc3d4ec56cda9c7ec918e3c57350b96e36a
- MD5 e6f34163fab9cb171d2ca0e7fd111211
- SHA1 52b97cb571eda097d0fb95c21f07ba5ed130b60e
- SHA512 9edb1686590e06ab81492bcba0d5742d75c8245ea4ecc4ace0672f847a698fd63f8bf0db59b169f4d1a0052e485b1f09676c22d6d5bcb0b9510542efa08c3e49
- SSDEEP 1572864:E/zKWSnAW8Iw8ZIG45r97DTJVj8/B62U9tTvov3UvhDb3AN:sZoAW8IwYUH7T2U9tTvovgxbwN
- TLSH T1E0F72332F74040B6D4EB4271959BA716EE787922073046CB5254CAA5EF337E23F3A729
- MD5 SHA1 SHA512 SSDEEP TLSH
Modifies Windows Firewall
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1