General
- Target ON1_NoNoise_AI_2024.exe
- Size 374.6MB
- Sample260716-2pmmpsay8t
- SHA256 453af31779d4989288d561b4cf6d9d0641e5e17f9a15a029354e2efbc4f5884f
- MD5 3969f60ba3d9e601bfa98ccc9aae3f6a
- SHA1 5237d451e2254f97bbe3804e82e8ff650a6b5155
- SHA512 11197cee18497d6ae6a8ddf9bf61fc2dcdd83929c22a90f062f4b745e8b7aecade35fd237faf63fa70d34378f9deb0045d6fc2530ab6295415fce283d83662a2
- SSDEEP 6291456:vlo9lk44rRlabKpx0x/SFdEIP/XFohEW0dIdluQCfruAzXijVDhYTgMPKX7LDg3S:v+9D4rfa4W/SFeIP/ShEHClYTnzSbKKj
- TLSH T16619339B72A500E8C076C07C8A57C257F77278165B318BDB26A5969A5F33BF06D3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ON1_NoNoise_AI_2024.exe
Resource
win11-20260513-en
27 signatures
300 seconds
Malware Config
Targets
-
- Target ON1_NoNoise_AI_2024.exe
- Size 374.6MB
- SHA256 453af31779d4989288d561b4cf6d9d0641e5e17f9a15a029354e2efbc4f5884f
- MD5 3969f60ba3d9e601bfa98ccc9aae3f6a
- SHA1 5237d451e2254f97bbe3804e82e8ff650a6b5155
- SHA512 11197cee18497d6ae6a8ddf9bf61fc2dcdd83929c22a90f062f4b745e8b7aecade35fd237faf63fa70d34378f9deb0045d6fc2530ab6295415fce283d83662a2
- SSDEEP 6291456:vlo9lk44rRlabKpx0x/SFdEIP/XFohEW0dIdluQCfruAzXijVDhYTgMPKX7LDg3S:v+9D4rfa4W/SFeIP/ShEHClYTnzSbKKj
- TLSH T16619339B72A500E8C076C07C8A57C257F77278165B318BDB26A5969A5F33BF06D3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1