General
- Target 647156b15b68d18873a51581199075622958dba071d08acece1447c0da8e9b8c
- Size 266KB
- Sample260717-a77baagy9k
- SHA256 647156b15b68d18873a51581199075622958dba071d08acece1447c0da8e9b8c
- MD5 b874391f6c0122142d3891b5d9fc37e5
- SHA1 1c11f7a44b03af6e96698bffde9a0bc07ce5cea4
- SHA512 76668f8ab2f997fe4c8cb013cf355909864d1f9ee8430054113bb48c58ed37b9a0c3a5bf403037f3b2044fc3d192c86b728c27326d7c2717b805e6e7912234a7
- SSDEEP 6144:pQ0nytr+ee96NZzRz3JzX3gNYxyyfMioYThUYPiLqLwzXYE:esI1e0zRNzX3gJDiTxPiLq+XP
- TLSH T1994413A0568BF775C8C3D3ECB22C136D78CD4086E46F74972B8DD19B8B288F1069599B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rootkit/RunAsAdmin.bat
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
rootkit/RunAsAdmin.bat
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
rootkit/lrkndrv.sys
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
rootkit/lrkndrv.sys
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target rootkit/RunAsAdmin.bat
- Size 213B
- SHA256 6d9b8c1ed1c512d747f3f4996c1d99c1c0cf0559e9f5538cb8c11b2613d5a297
- MD5 0070056d35edeb1b22b078e29b86a5a4
- SHA1 69cf9e268bb4138e2f71668d69aa26640e00f987
- SHA512 a0abe59a07b5840030e100a9c62585696663be4dfe20d5e160a9e583fca0e1655e4b605d914c5f232bd49df02c11b841a198c9458c793bc8c86e40b79ddd4810
- TLSH T188D0220387C0A70331994D02E20B6C347D32753C89BA20A0CF4D72C4E00829E8370FF5
- MD5 SHA1 SHA512 TLSH
Score8/10-
Drops file in Drivers directory
-
Creates new service(s)
-
- Target rootkit/lrkndrv.sys
- Size 53KB
- SHA256 d5c802f22d13db85a2271978762e2db288d688672ab40bd2712aa5159d27e39e
- MD5 dd4e32a23d031d41454f8e5f2b47dd9e
- SHA1 d9e00c3038717aaa9518c82bb0be221e1afe99c9
- SHA512 baf4d2833a4168cd2c169bce2a6b7de11b8b4d4c05cd063551fc3ee43c9100ccf497c569b7919619deafeb9806510eb42c2e27d32a85911a116b67211bd611e5
- SSDEEP 1536:oO3hL6iqeOdwL+ocrwsFOjHb1rFL/XImLhzNLFJWXSoCnYDfqx62+kBMzdHA:oORL6PeOwL+ocrwsFOjHb1rFL/XImLh3
- TLSH T11433F94F245E16BCE442917AC1D3D0A6F670318A0332A7CF8AE9B5686E13DE5B335B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10