General
- Target Stub-cleaned.exe
- Size 355KB
- Sample260717-lbfz1aby7w
- SHA256 30d60ba7fad2736c2d83ac4e982ef593ac38a47ecddb7a646cc36177b1a93973
- MD5 61b4a14d14cdf8fdf2726ccc6d2a2b8e
- SHA1 30961ab3cf404cef9b18e484c368d28b529b3029
- SHA512 002e118d0b3757488a03897134a5f859be6cad1f195f2aa87c6a2f2f6509c2140fdd2a38188a87222c8254e0f89416c0023b6144cd57889a4a1125e8efc0b058
- SSDEEP 6144:TN4aS6i+2vJqsAhO3/Hp8UrV7TtIQlMB38lS5MvUxHe+rVLPRRt3XgU8pM69/KIZ:Z4aS6i+2vJhpvHqUp7pImY386d
- TLSH T18074BF68639B893EC3AE537DE060124947F46227C213F74C99A6A8FC4F1B3536B52793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Stub-cleaned.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stub-cleaned.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Stub-cleaned.exe
- Size 355KB
- SHA256 30d60ba7fad2736c2d83ac4e982ef593ac38a47ecddb7a646cc36177b1a93973
- MD5 61b4a14d14cdf8fdf2726ccc6d2a2b8e
- SHA1 30961ab3cf404cef9b18e484c368d28b529b3029
- SHA512 002e118d0b3757488a03897134a5f859be6cad1f195f2aa87c6a2f2f6509c2140fdd2a38188a87222c8254e0f89416c0023b6144cd57889a4a1125e8efc0b058
- SSDEEP 6144:TN4aS6i+2vJqsAhO3/Hp8UrV7TtIQlMB38lS5MvUxHe+rVLPRRt3XgU8pM69/KIZ:Z4aS6i+2vJhpvHqUp7pImY386d
- TLSH T18074BF68639B893EC3AE537DE060124947F46227C213F74C99A6A8FC4F1B3536B52793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
Adds Run key to start application
Drops desktop.ini file(s)
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
2