Overview
overview
8Static
static
3stager.exe
windows10-ltsc_2021-x64
7stager.exe
windows10-2004-x64
7stager.exe
windows11-21h2-x64
7stager.exe
windows11-ltsc_2024-x64
8stager_src.ps1
windows10-ltsc_2021-x64
3stager_src.ps1
windows10-2004-x64
3stager_src.ps1
windows11-21h2-x64
3stager_src.ps1
windows11-ltsc_2024-x64
3General
- Target stager.exe
- Size 6.6MB
- Sample260714-s7e6xaat41
- SHA256 9845bf503a72f69e42704d7d7db643efb985f720f5fd9047bfae8e3ad8df4699
- MD5 f418be9d2155d21de5ffacc45f8993a7
- SHA1 d8612d298f1e8ca4bd70705e4c14b1934b1d267f
- SHA512 da1298b7575b250ed817ed9a45f7ceba45bec7fd67ecc654d2a99952ed7f74f56415eb134700cb7ff820021cf3cbb42ef9b1d460480109b77a938b46da5c6927
- SSDEEP 196608:dcWnlhc2eoLKEgKuFpNe1WiEQOQdChpAX:dZIo5o6EbQWAX
- TLSH T14E66335099D1C57FF8B75A390579CBF8063DB5211B80E4CBA39850BA9D23BD2B13A31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
stager.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
stager.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
stager.exe
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
stager.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
stager_src.ps1
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
stager_src.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
stager_src.ps1
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
stager_src.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target stager.exe
- Size 6.6MB
- SHA256 9845bf503a72f69e42704d7d7db643efb985f720f5fd9047bfae8e3ad8df4699
- MD5 f418be9d2155d21de5ffacc45f8993a7
- SHA1 d8612d298f1e8ca4bd70705e4c14b1934b1d267f
- SHA512 da1298b7575b250ed817ed9a45f7ceba45bec7fd67ecc654d2a99952ed7f74f56415eb134700cb7ff820021cf3cbb42ef9b1d460480109b77a938b46da5c6927
- SSDEEP 196608:dcWnlhc2eoLKEgKuFpNe1WiEQOQdChpAX:dZIo5o6EbQWAX
- TLSH T14E66335099D1C57FF8B75A390579CBF8063DB5211B80E4CBA39850BA9D23BD2B13A31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target stager_src.pyc
- Size 15KB
- SHA256 4e64682621ed4cdb53b4b986d3398fee90f14dc72283af23b1e4946d51ffd063
- MD5 42cba78fad5669457c238d26cedd1194
- SHA1 9deb67248abaefa54fa2392aa8ff345baa81e2cf
- SHA512 de425cf7a3085129b76493841537896e6f68ab6eff5ceac4f0e5b54f437dd9ce248afa1a03db199511353b84f7c569821f567828d748b9090b5861ea4675c0dc
- SSDEEP 192:PpztEeZH3QczD+k+jk0fmSOcWuj8kU7lLK9DBDCwDT+CtEYIXZL6bTJ/H9acwx:PpztE8L+ZNI7lm9D532fJ0TVwx
- TLSH T1B962E9428414C132FF91B135C8998824A3AEAFE7B526C722230F52316CDB66ACF7230D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10