General
- Target Vixen.Free.Temp.zip
- Size 72KB
- Sample260715-a8anpsbs81
- SHA256 bc26fd5f60834276b009d02a42e14a5ea5a02b059a4606069798751c18b69b43
- MD5 28aa9337c2162d5ac4cc3e140488446d
- SHA1 b88ccd26410b8c3790d037b41e674e424549dd01
- SHA512 f869e3a6c75d5409ed97eea2375f450afc56a9c6c1672df5fb79daa6f2fbeae598e2f4ec52379b7ada26970b1e9104e25988477db561419edc30b243d4ec52bf
- SSDEEP 1536:uRjHdFol4/8iW7VRuGZK8Ip6tKVI12/znC6KnNx8ohh6e/o+IZGFPn:ivr/8iW7juMKtHy12/2pnNx8pe/o7Zgf
- TLSH T17C7302B1988B4E7EC62C672D12EE708737A862D5D40192B4D57BC6456F500CFB9CF192
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vixen.Free.Temp.zip
Resource
win10v2004-20260513-en
9 signatures
600 seconds
Behavioral task
behavioral2
Sample
Vixen.Free.Temp.zip
Resource
win10ltsc2021-20260513-en
0 signatures
600 seconds
Malware Config
Targets
-
- Target Vixen.Free.Temp.zip
- Size 72KB
- SHA256 bc26fd5f60834276b009d02a42e14a5ea5a02b059a4606069798751c18b69b43
- MD5 28aa9337c2162d5ac4cc3e140488446d
- SHA1 b88ccd26410b8c3790d037b41e674e424549dd01
- SHA512 f869e3a6c75d5409ed97eea2375f450afc56a9c6c1672df5fb79daa6f2fbeae598e2f4ec52379b7ada26970b1e9104e25988477db561419edc30b243d4ec52bf
- SSDEEP 1536:uRjHdFol4/8iW7VRuGZK8Ip6tKVI12/znC6KnNx8ohh6e/o+IZGFPn:ivr/8iW7juMKtHy12/2pnNx8pe/o7Zgf
- TLSH T17C7302B1988B4E7EC62C672D12EE708737A862D5D40192B4D57BC6456F500CFB9CF192
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1