General
- Target annoying.exe
- Size 8.2MB
- Sample260708-tzaf5adw8x
- SHA256 b8fd750a776b1103b5e5df2f0362fb872dca99dbc34907ab07b7c8188e6ccfda
- MD5 ab4a2d25abab7e5aef97526cb51d263c
- SHA1 0a2d3a1aeac5f8d531e45f2f5215c3396eda28bc
- SHA512 cde4bb1fcb4e920782f86e5da218f9f12d4f9c08d5e86e0e90f74477d01c377170bb798ca2137b08ddcfe743a42787bcfec9d8f3e074afb9b61409b1a612854d
- SSDEEP 196608:b01Ljv+bhqNVoCgD7fEXEoYY0wavk9FIifW:bCL+9qzPgD7fEUY0++
- TLSH T138863354A39504E8DC67003E9766C086D7BAF9036728C9CBA39F762E3E37AD18039775
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
annoying.exe
Resource
win11-20260513-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target annoying.exe
- Size 8.2MB
- SHA256 b8fd750a776b1103b5e5df2f0362fb872dca99dbc34907ab07b7c8188e6ccfda
- MD5 ab4a2d25abab7e5aef97526cb51d263c
- SHA1 0a2d3a1aeac5f8d531e45f2f5215c3396eda28bc
- SHA512 cde4bb1fcb4e920782f86e5da218f9f12d4f9c08d5e86e0e90f74477d01c377170bb798ca2137b08ddcfe743a42787bcfec9d8f3e074afb9b61409b1a612854d
- SSDEEP 196608:b01Ljv+bhqNVoCgD7fEXEoYY0wavk9FIifW:bCL+9qzPgD7fEUY0++
- TLSH T138863354A39504E8DC67003E9766C086D7BAF9036728C9CBA39F762E3E37AD18039775
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables Task Manager via registry modification
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1