General
- Target dd16713b0971d147923b9d4bec787f5ae65fa78f718a226e3c90d491c3a1de59
- Size 1.9MB
- Sample260715-v79fvsdx2w
- SHA256 dd16713b0971d147923b9d4bec787f5ae65fa78f718a226e3c90d491c3a1de59
- MD5 a6d2fb8459e916f4f608b67d371b8a6b
- SHA1 f49c5fd71bc118685b389c08484c7a7f4bd4f5d8
- SHA512 2eb21e319b6945487e752a0fb60f5166cb96ac7c6477708319018c69880ffc78119d8fe1ae0886abeb665c55f29794ca754060e5872c021db0cfc74277fa8d1a
- SSDEEP 49152:Oq7kwk57k599qO4wab2BggUSuzG87zzGafVx:lI9U9q9wabOghJ7zzG6
- TLSH T17F9533D5113A5604E88B74B4D22EFD612208FC2C899947A337BBFE4AFD30B6A0755277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
dd16713b0971d147923b9d4bec787f5ae65fa78f718a226e3c90d491c3a1de59.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
dd16713b0971d147923b9d4bec787f5ae65fa78f718a226e3c90d491c3a1de59.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target dd16713b0971d147923b9d4bec787f5ae65fa78f718a226e3c90d491c3a1de59
- Size 1.9MB
- SHA256 dd16713b0971d147923b9d4bec787f5ae65fa78f718a226e3c90d491c3a1de59
- MD5 a6d2fb8459e916f4f608b67d371b8a6b
- SHA1 f49c5fd71bc118685b389c08484c7a7f4bd4f5d8
- SHA512 2eb21e319b6945487e752a0fb60f5166cb96ac7c6477708319018c69880ffc78119d8fe1ae0886abeb665c55f29794ca754060e5872c021db0cfc74277fa8d1a
- SSDEEP 49152:Oq7kwk57k599qO4wab2BggUSuzG87zzGafVx:lI9U9q9wabOghJ7zzG6
- TLSH T17F9533D5113A5604E88B74B4D22EFD612208FC2C899947A337BBFE4AFD30B6A0755277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1