General
- Target mveLexmark-windows-4.5.1.exe
- Size 268.9MB
- Sample260710-rrpjzabs3k
- SHA256 a4ec41bf1cc65ebbab19467c034082740b780127945b85f1d22f5af266a5f393
- MD5 e437440bd07f2043f99568907a32fa4c
- SHA1 61a1e8acc6476bfe613a3cf8c9449c29257b23bd
- SHA512 f2ade3d7b9884af9af4d88167c2b6c3af8d56f4069fec0c63937478c3df682634c742a9ff46f0064941b00fd427c51acd5265b4b14a776c38277026e4996b2e0
- SSDEEP 6291456:maOvO2WEBhcpGB2Dh2QxbAZuBmfhgs0XdearqPB+HE8C:NVhEnaGMYqbWuwfhIXdz2p6Ed
- TLSH T19DD83329F9DE98B1EA33D131C193C81BB635558CC086908FE6A81786EDB79C41B077DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mveLexmark-windows-4.5.1.exe
Resource
win11-20260513-en
22 signatures
300 seconds
Malware Config
Targets
-
- Target mveLexmark-windows-4.5.1.exe
- Size 268.9MB
- SHA256 a4ec41bf1cc65ebbab19467c034082740b780127945b85f1d22f5af266a5f393
- MD5 e437440bd07f2043f99568907a32fa4c
- SHA1 61a1e8acc6476bfe613a3cf8c9449c29257b23bd
- SHA512 f2ade3d7b9884af9af4d88167c2b6c3af8d56f4069fec0c63937478c3df682634c742a9ff46f0064941b00fd427c51acd5265b4b14a776c38277026e4996b2e0
- SSDEEP 6291456:maOvO2WEBhcpGB2Dh2QxbAZuBmfhgs0XdearqPB+HE8C:NVhEnaGMYqbWuwfhIXdz2p6Ed
- TLSH T19DD83329F9DE98B1EA33D131C193C81BB635558CC086908FE6A81786EDB79C41B077DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1