General
- Target ArgonInstaller-runasadmin.exe
- Size 24KB
- Sample260708-gllwsacv2m
- SHA256 8c26d7654cbda0c92dd29255fb632cd26eeee7bdc1bce7c857d0d37d98138968
- MD5 089bb87ab03fe26c5c64215a4e9904a3
- SHA1 0346f1af6281eca4589a3512a7f75dd08430c361
- SHA512 a9630bc07b799c4ef4cf86472b23c11cb2e15526fcd5d3f26404bdeb0449c01311463c7a4e22dab4d4194b53c8def7a98bd2881992cb2f38fb7af899458abfbe
- SSDEEP 768:G0SE+IsBHOVDhba1u/sbZreFDXNDUh3N:G0D1sx29a5UXNa
- TLSH T1BBB23B2EBB0A44E9D4A753BAC8F70729D77179601B21A3CF63A5810D4F252D1B87EE42
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ArgonInstaller-runasadmin.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ArgonInstaller-runasadmin.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target ArgonInstaller-runasadmin.exe
- Size 24KB
- SHA256 8c26d7654cbda0c92dd29255fb632cd26eeee7bdc1bce7c857d0d37d98138968
- MD5 089bb87ab03fe26c5c64215a4e9904a3
- SHA1 0346f1af6281eca4589a3512a7f75dd08430c361
- SHA512 a9630bc07b799c4ef4cf86472b23c11cb2e15526fcd5d3f26404bdeb0449c01311463c7a4e22dab4d4194b53c8def7a98bd2881992cb2f38fb7af899458abfbe
- SSDEEP 768:G0SE+IsBHOVDhba1u/sbZreFDXNDUh3N:G0D1sx29a5UXNa
- TLSH T1BBB23B2EBB0A44E9D4A753BAC8F70729D77179601B21A3CF63A5810D4F252D1B87EE42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Access Token Manipulation
1Create Process with Token
1Boot or Logon Autostart Execution
1Active Setup
1Defense Evasion
Access Token Manipulation
1Create Process with Token
1Modify Registry
2