General
- Target Private-Service.exe
- Size 82.3MB
- Sample260707-16v5qsfy2m
- SHA256 d3cc50e847e89ca6abb263865d8013b7a7de8c1d05333babe0116ac7e964e415
- MD5 328679ed3d75c3ef8c31770cfdcc0459
- SHA1 ccdd31cff61bfa046c365d1ceaf836b92f329eb8
- SHA512 1874e34b36c734fab650a27609397b754f86c450d3b26790fb4d0d629567ef109d8d34d52119372d8cfdb22055862638b47e8852a9518ffe3c153bd915049cea
- SSDEEP 1572864:+y7TmMd+vWlM9ojCrD4WWJvKSc/JUNnd1TXmmXhlWRHJE3KNG93s0:+ymFelKbDSc/iFPXmn9tG93
- TLSH T1751833088D50A81AF89ED0375DD49EA2E67578281582CEC71AF406751EE77CCED3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Private-Service.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Private-Service.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target Private-Service.exe
- Size 82.3MB
- SHA256 d3cc50e847e89ca6abb263865d8013b7a7de8c1d05333babe0116ac7e964e415
- MD5 328679ed3d75c3ef8c31770cfdcc0459
- SHA1 ccdd31cff61bfa046c365d1ceaf836b92f329eb8
- SHA512 1874e34b36c734fab650a27609397b754f86c450d3b26790fb4d0d629567ef109d8d34d52119372d8cfdb22055862638b47e8852a9518ffe3c153bd915049cea
- SSDEEP 1572864:+y7TmMd+vWlM9ojCrD4WWJvKSc/JUNnd1TXmmXhlWRHJE3KNG93s0:+ymFelKbDSc/iFPXmn9tG93
- TLSH T1751833088D50A81AF89ED0375DD49EA2E67578281582CEC71AF406751EE77CCED3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops startup file
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1