General
- Target Loader.exe
- Size 923KB
- Sample260710-13b8fsb17r
- SHA256 5d2d477d314212964e4c62f28d7ab821b63dfa453228b48ef9aeb525a4ec17d9
- MD5 b9d8fd22454cfe80e1c98e7a00138638
- SHA1 c4d3d4f51f105756ac3b310a735bae66cb4125a5
- SHA512 37a6a1cd891da52132c0c89d8631a1b739b4b1a5c655fe6317f34c848ed0e264413f8118885f8e17e65d46cbb961a04add89caad80f5d6238faa56e48d167563
- SSDEEP 24576:xtIGvsly1YUbHaT9zugK3LVEL2zibnovx:xX0lIlke7VEKubne
- TLSH T1BB15BF4BF2B842FAC43BD13AC9A6D547FA76348907601AEB13D409982F637E05E7B711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win11ltsc2024-20260710-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target Loader.exe
- Size 923KB
- SHA256 5d2d477d314212964e4c62f28d7ab821b63dfa453228b48ef9aeb525a4ec17d9
- MD5 b9d8fd22454cfe80e1c98e7a00138638
- SHA1 c4d3d4f51f105756ac3b310a735bae66cb4125a5
- SHA512 37a6a1cd891da52132c0c89d8631a1b739b4b1a5c655fe6317f34c848ed0e264413f8118885f8e17e65d46cbb961a04add89caad80f5d6238faa56e48d167563
- SSDEEP 24576:xtIGvsly1YUbHaT9zugK3LVEL2zibnovx:xX0lIlke7VEKubne
- TLSH T1BB15BF4BF2B842FAC43BD13AC9A6D547FA76348907601AEB13D409982F637E05E7B711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1