General
- Target test.exe
- Size 1024KB
- Sample260718-3qa6qsft7p
- SHA256 99acafed29d382e7c6a50ae4bdcec1751b0a86a31264ab1a34af9a06c16ca51a
- MD5 54765f2303e0402947e3b7bb9e13a89d
- SHA1 f26b7755674c227c5d722aee5f7a50350cfed032
- SHA512 36aaeef5ed5661e5c9ac83361f4df74f69dfffe03e14f4a46f02292dc1401d0e20cdc99b66e76ca449241130e156b6806c055a9ce73f2adc44f542019da183a2
- SSDEEP 384:kVPdze8a7O6UHqc+Q5HKU2D8LWdCLaC9eahpkg62ZFQfX90uID8:kVPdK8Xs45KU2k7GC9Zgg62ZafX90uz
- TLSH T12825080C37EC8615E1BE5B7D99B293118671FA520D31CB8E2ED30ADD0D36B508D68F66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
test.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
test.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target test.exe
- Size 1024KB
- SHA256 99acafed29d382e7c6a50ae4bdcec1751b0a86a31264ab1a34af9a06c16ca51a
- MD5 54765f2303e0402947e3b7bb9e13a89d
- SHA1 f26b7755674c227c5d722aee5f7a50350cfed032
- SHA512 36aaeef5ed5661e5c9ac83361f4df74f69dfffe03e14f4a46f02292dc1401d0e20cdc99b66e76ca449241130e156b6806c055a9ce73f2adc44f542019da183a2
- SSDEEP 384:kVPdze8a7O6UHqc+Q5HKU2D8LWdCLaC9eahpkg62ZFQfX90uID8:kVPdK8Xs45KU2k7GC9Zgg62ZafX90uz
- TLSH T12825080C37EC8615E1BE5B7D99B293118671FA520D31CB8E2ED30ADD0D36B508D68F66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1