General
- Target Disco.exe
- Size 17.1MB
- Sample260708-xcaedsf171
- SHA256 803a8fc2a9b0d594577038b59ab62c6cba5135318416ed2e29039b58aeaaf45b
- MD5 61420ae727868e5d9ba4da7d567cc17b
- SHA1 3c37543eaab87bbf122901909d69a1f0855da851
- SHA512 dd5996a5c572b41a3c1379edae8b5700488574af6fada688b3a3b4f91009baeef83acd10043e215d97c841c9b21c9d8dab0b0dde8e271a5baa830cfc9fa150a1
- SSDEEP 196608:3Kvn5ditKJsp4/FSut292v0wFfvWopmKJ3B//TiA:3Kv5dtJsp4/F557z/5
- TLSH T1A9073C4767874DE6DCC63BB4B99B233C4730FD219E690B2BA54881285C533DCAD2EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Disco.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Disco.exe
- Size 17.1MB
- SHA256 803a8fc2a9b0d594577038b59ab62c6cba5135318416ed2e29039b58aeaaf45b
- MD5 61420ae727868e5d9ba4da7d567cc17b
- SHA1 3c37543eaab87bbf122901909d69a1f0855da851
- SHA512 dd5996a5c572b41a3c1379edae8b5700488574af6fada688b3a3b4f91009baeef83acd10043e215d97c841c9b21c9d8dab0b0dde8e271a5baa830cfc9fa150a1
- SSDEEP 196608:3Kvn5ditKJsp4/FSut292v0wFfvWopmKJ3B//TiA:3Kv5dtJsp4/F557z/5
- TLSH T1A9073C4767874DE6DCC63BB4B99B233C4730FD219E690B2BA54881285C533DCAD2EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1