General
- Target c16fcd962df7aa4f7a45a1bfb521c50f6be2def1e2b9357d0af2bbf67e7bb4dd
- Size 114KB
- Sample260707-14th5aez7t
- SHA256 c16fcd962df7aa4f7a45a1bfb521c50f6be2def1e2b9357d0af2bbf67e7bb4dd
- MD5 dc0988c98b6cc94bf5f570d657f58d37
- SHA1 8a477bd585ce4a9091fb16f690e54a0012999d54
- SHA512 cc7b4179d716b60f439563f059a6b575ba73994d31de9ad9f8aeef630d95a2715934fb8fa26218509b59c20b730fcb510cc41881d151a320b88d62676ae1aa5b
- SSDEEP 3072:dPPHuLnn//FO3j5kt37GZ+G9+GhdGNcGiNG:dPWLn//FOF8Ljv8xJ
- TLSH T14DB36D01BAF99515F2F36B70ADB9A7605A3EBD616C35C25F62502E0F2832B00DD60B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
c16fcd962df7aa4f7a45a1bfb521c50f6be2def1e2b9357d0af2bbf67e7bb4dd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
c16fcd962df7aa4f7a45a1bfb521c50f6be2def1e2b9357d0af2bbf67e7bb4dd.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target c16fcd962df7aa4f7a45a1bfb521c50f6be2def1e2b9357d0af2bbf67e7bb4dd
- Size 114KB
- SHA256 c16fcd962df7aa4f7a45a1bfb521c50f6be2def1e2b9357d0af2bbf67e7bb4dd
- MD5 dc0988c98b6cc94bf5f570d657f58d37
- SHA1 8a477bd585ce4a9091fb16f690e54a0012999d54
- SHA512 cc7b4179d716b60f439563f059a6b575ba73994d31de9ad9f8aeef630d95a2715934fb8fa26218509b59c20b730fcb510cc41881d151a320b88d62676ae1aa5b
- SSDEEP 3072:dPPHuLnn//FO3j5kt37GZ+G9+GhdGNcGiNG:dPWLn//FOF8Ljv8xJ
- TLSH T14DB36D01BAF99515F2F36B70ADB9A7605A3EBD616C35C25F62502E0F2832B00DD60B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Event Triggered Execution: Image File Execution Options Injection
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Image File Execution Options Injection
1