General
- Target releases
- Size 215KB
- Sample260719-rtbqwsft8v
- SHA256 cf739fde599e5cd60c899eae5cd0d552c70ab1dfa21cdb30ffcbc1c95f31c6bc
- MD5 961660a82464b9e5e43a76c00679a717
- SHA1 0b16b8ad44963dbf948506e26a7339834c5e6b41
- SHA512 165c88cd1b9623c6c34befe0e92938cfa41700f2dc43820368e7bf5f637a9a7df08fdfc0e6a4032d09055560752c86826215692f2c27d6f23f03dd1ff7fcfb8a
- SSDEEP 6144:8TUPqLxfprwz/VZIdxqdnLhjUsnVm7MeqWQ8Wz09medzeJ5PTQYbeHxHA7op9hrp:UUPqLxfprwz/VZIdxqdnLhjUsnVm7Mej
- TLSH T17024B470A178617D016F268AF670DB14D3ABE31BEB8952E5B53F82F457D3C84EA43098
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
releases.html
Resource
win11-20260513-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target releases
- Size 215KB
- SHA256 cf739fde599e5cd60c899eae5cd0d552c70ab1dfa21cdb30ffcbc1c95f31c6bc
- MD5 961660a82464b9e5e43a76c00679a717
- SHA1 0b16b8ad44963dbf948506e26a7339834c5e6b41
- SHA512 165c88cd1b9623c6c34befe0e92938cfa41700f2dc43820368e7bf5f637a9a7df08fdfc0e6a4032d09055560752c86826215692f2c27d6f23f03dd1ff7fcfb8a
- SSDEEP 6144:8TUPqLxfprwz/VZIdxqdnLhjUsnVm7MeqWQ8Wz09medzeJ5PTQYbeHxHA7op9hrp:UUPqLxfprwz/VZIdxqdnLhjUsnVm7Mej
- TLSH T17024B470A178617D016F268AF670DB14D3ABE31BEB8952E5B53F82F457D3C84EA43098
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables RegEdit via registry modification
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3