General
- Target e8bc3ab1e100428680277a29302a32bf576b14fffa40658e75b6243ef2c51651
- Size 1.9MB
- Sample260712-vbellsfw2w
- SHA256 e8bc3ab1e100428680277a29302a32bf576b14fffa40658e75b6243ef2c51651
- MD5 702deedf1c16270c147a3a7b22576b81
- SHA1 45eb9ca3b63602bb32116bfd6eb82ad13fff36d7
- SHA512 254a81470b5ac8bea12f9a0474ed62f159a0242823a389296ac7158ae4933c171bcf9e048e1d5c01a5333d3a12a66d2083604719db6dad221bbfc54d8b665643
- SSDEEP 49152:acen4whfXITNzLthLV8VT0alS4o/+Cmd/0cX:aTzfcNzLtWlN1d0cX
- TLSH T1409533525776083CF12AB9BDD906BC60B20CFD2C6CC7219724AFFC9A78722217B55993
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
e8bc3ab1e100428680277a29302a32bf576b14fffa40658e75b6243ef2c51651.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
e8bc3ab1e100428680277a29302a32bf576b14fffa40658e75b6243ef2c51651.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target e8bc3ab1e100428680277a29302a32bf576b14fffa40658e75b6243ef2c51651
- Size 1.9MB
- SHA256 e8bc3ab1e100428680277a29302a32bf576b14fffa40658e75b6243ef2c51651
- MD5 702deedf1c16270c147a3a7b22576b81
- SHA1 45eb9ca3b63602bb32116bfd6eb82ad13fff36d7
- SHA512 254a81470b5ac8bea12f9a0474ed62f159a0242823a389296ac7158ae4933c171bcf9e048e1d5c01a5333d3a12a66d2083604719db6dad221bbfc54d8b665643
- SSDEEP 49152:acen4whfXITNzLthLV8VT0alS4o/+Cmd/0cX:aTzfcNzLtWlN1d0cX
- TLSH T1409533525776083CF12AB9BDD906BC60B20CFD2C6CC7219724AFFC9A78722217B55993
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1