General
- Target SiNiSistar 2_15bS-Q2.exe
- Size 15.4MB
- Sample260716-cqdnraew61
- SHA256 c186526bba36a0ea2aaf9df79fe999a8c7e1a1e477e3c658de776b921836b794
- MD5 a35c246b9b370cb452544f2af3ee2bed
- SHA1 0a871c0cec14435f44ddf603b252333e08b88145
- SHA512 7277f96d618fb845b5bcb53cba0df0b8c25052481980ed35aaca3b659c39b053270d6adf924dcb0dc9d7e7dde61f177c46d6d51adbbb81e70c1cc08d8a668722
- SSDEEP 393216:9QPWVMwFVkQYS9Hq011WbqjOw29Wjyv0D0vSi:AIMwFtf9K011WdHSi
- TLSH T186F6333FF28B653DE06A6A3AB9B2D201593BB65075524C52D6E4C49CCF260B01E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SiNiSistar 2_15bS-Q2.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
SiNiSistar 2_15bS-Q2.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target SiNiSistar 2_15bS-Q2.exe
- Size 15.4MB
- SHA256 c186526bba36a0ea2aaf9df79fe999a8c7e1a1e477e3c658de776b921836b794
- MD5 a35c246b9b370cb452544f2af3ee2bed
- SHA1 0a871c0cec14435f44ddf603b252333e08b88145
- SHA512 7277f96d618fb845b5bcb53cba0df0b8c25052481980ed35aaca3b659c39b053270d6adf924dcb0dc9d7e7dde61f177c46d6d51adbbb81e70c1cc08d8a668722
- SSDEEP 393216:9QPWVMwFVkQYS9Hq011WbqjOw29Wjyv0D0vSi:AIMwFtf9K011WdHSi
- TLSH T186F6333FF28B653DE06A6A3AB9B2D201593BB65075524C52D6E4C49CCF260B01E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1