General
- Target Stub-cleaned.exe
- Size 1.8MB
- Sample260717-mf993scx3v
- SHA256 00e085df21d2388f1a919948530714d5635257a24e1b37c653e79c4e17b5bb38
- MD5 b52c28127aa47a0ffd0bb9929f4b4de1
- SHA1 75a6d54ed82a20e0685cf6e355a45e38ba4d7ec4
- SHA512 9c2fb4e39c55d7f50315ba0961c3dab9e5b9405cbe09f42f23f6b8e6d59cbd0a5b072d13ff97fa0646886a81a0cb5f9acc65f1392bbff335f6cdc37a17ecf9e2
- SSDEEP 49152:N4Fq+sL2An+xwULQBK+orsQ5PNzdNvtoB7mQvxypk:N4Fq+sLiZWKbswd3I7m
- TLSH T1EF851259534B8A7DC7BD837DE56022090BF45227C123FB8C98A5E4FC5A2B3139B52B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Stub-cleaned.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stub-cleaned.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Stub-cleaned.exe
- Size 1.8MB
- SHA256 00e085df21d2388f1a919948530714d5635257a24e1b37c653e79c4e17b5bb38
- MD5 b52c28127aa47a0ffd0bb9929f4b4de1
- SHA1 75a6d54ed82a20e0685cf6e355a45e38ba4d7ec4
- SHA512 9c2fb4e39c55d7f50315ba0961c3dab9e5b9405cbe09f42f23f6b8e6d59cbd0a5b072d13ff97fa0646886a81a0cb5f9acc65f1392bbff335f6cdc37a17ecf9e2
- SSDEEP 49152:N4Fq+sL2An+xwULQBK+orsQ5PNzdNvtoB7mQvxypk:N4Fq+sLiZWKbswd3I7m
- TLSH T1EF851259534B8A7DC7BD837DE56022090BF45227C123FB8C98A5E4FC5A2B3139B52B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1