General
- Target implant.exe
- Size 178KB
- Sample260714-xpm61set5x
- SHA256 e4ceb3db7ef8d5e8cf85c04e4c6493b6cfcba141a39c493d458603b9b072c344
- MD5 8d35295133f8d89ce0db882829db1498
- SHA1 80818a284836622abbf27ba3483aa637db1e461a
- SHA512 7cec86695c0326ee2449604d639dd72cf153ae5bdb24dca93b1f1eecaeb2390e9b5176c54f6e8f3b2438edbe31a0414cbdc1a07a82e9a1d4b829aac142ff445a
- SSDEEP 3072:GnDmeGwUKsV+LkNALOy9TKERVZ/jkUzwRM3VnSCE0C617:GDmeGJH0kNArKklkEbR3
- TLSH T1A4047D15BAA510FAD1BB8574C9410906FB73BC4647A0AADF57900EF68F237E09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
implant.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
implant.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target implant.exe
- Size 178KB
- SHA256 e4ceb3db7ef8d5e8cf85c04e4c6493b6cfcba141a39c493d458603b9b072c344
- MD5 8d35295133f8d89ce0db882829db1498
- SHA1 80818a284836622abbf27ba3483aa637db1e461a
- SHA512 7cec86695c0326ee2449604d639dd72cf153ae5bdb24dca93b1f1eecaeb2390e9b5176c54f6e8f3b2438edbe31a0414cbdc1a07a82e9a1d4b829aac142ff445a
- SSDEEP 3072:GnDmeGwUKsV+LkNALOy9TKERVZ/jkUzwRM3VnSCE0C617:GDmeGJH0kNArKklkEbR3
- TLSH T1A4047D15BAA510FAD1BB8574C9410906FB73BC4647A0AADF57900EF68F237E09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1