General
- Target pack_manager-d4334c72c1eb32b06517386c9d43e296.exe
- Size 186.6MB
- Sample260707-gs7f3ags2j
- SHA256 2b179e3faf5e3027cba12dfa939965a56606d6fca0c820790a5d4de8859e1ac0
- MD5 fe5a79e52eb3f4ca45fb0b2025d7ef20
- SHA1 35ebe5e8db038b227189706183717ea3ba4bc27b
- SHA512 ca12ee89245283dcf8ae5a05c302319a3f909f329e63df4402052e1dddf70b0ce8869cac827414564563446bc6dc9b94737e67409a29f837e32c86288a499f99
- SSDEEP 3145728:mxjHz4x/V2z+O4c+LHSGMZ1AgX/mREOhBQ2ugocQCNp69xbndBezPQvODHzXJZ9a:mxjm/V2zcfhMZ1Vvt8LaxbnDe7+ETJW
- TLSH T117983313E1CEA33DE49E14365461A804053BEEE22227CC5396E4FD8CAF7B5862CED756
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
pack_manager-d4334c72c1eb32b06517386c9d43e296.exe
Resource
win11ltsc2024-20260706-en
26 signatures
900 seconds
Malware Config
Targets
-
- Target pack_manager-d4334c72c1eb32b06517386c9d43e296.exe
- Size 186.6MB
- SHA256 2b179e3faf5e3027cba12dfa939965a56606d6fca0c820790a5d4de8859e1ac0
- MD5 fe5a79e52eb3f4ca45fb0b2025d7ef20
- SHA1 35ebe5e8db038b227189706183717ea3ba4bc27b
- SHA512 ca12ee89245283dcf8ae5a05c302319a3f909f329e63df4402052e1dddf70b0ce8869cac827414564563446bc6dc9b94737e67409a29f837e32c86288a499f99
- SSDEEP 3145728:mxjHz4x/V2z+O4c+LHSGMZ1AgX/mREOhBQ2ugocQCNp69xbndBezPQvODHzXJZ9a:mxjm/V2zcfhMZ1Vvt8LaxbnDe7+ETJW
- TLSH T117983313E1CEA33DE49E14365461A804053BEEE22227CC5396E4FD8CAF7B5862CED756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1