General
- Target PermSpoofer.exe
- Size 670KB
- Sample260719-ydbvaads91
- SHA256 3828f4a8cbddd5ca68751e7342ca769f1e6488d9a8350491d850a18427dc4c39
- MD5 84327300495b887e46d020b7a93a8daf
- SHA1 42fb830109493fb948b9c3f3d0ba76d435cec460
- SHA512 3ec0b4721caf7c0891b5b6adfc5c1e58c60cbefce0c5e96ee4ceb31d8ac7f940db7c6d58c037cebf644b41d60c12df720637b242f5b6e1d232e8804c7cb5dfbd
- SSDEEP 12288:+P5NWyMZdUhjVMILIUJqaJwdEqG7dr9VWqmrDc0K6:wNRMfGuILIWquwdU+NDc
- TLSH T135E48E6AABA505E9C1B7C17D85178613F776B0491320CBDB53E085B92F13AE82F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PermSpoofer.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
PermSpoofer.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target PermSpoofer.exe
- Size 670KB
- SHA256 3828f4a8cbddd5ca68751e7342ca769f1e6488d9a8350491d850a18427dc4c39
- MD5 84327300495b887e46d020b7a93a8daf
- SHA1 42fb830109493fb948b9c3f3d0ba76d435cec460
- SHA512 3ec0b4721caf7c0891b5b6adfc5c1e58c60cbefce0c5e96ee4ceb31d8ac7f940db7c6d58c037cebf644b41d60c12df720637b242f5b6e1d232e8804c7cb5dfbd
- SSDEEP 12288:+P5NWyMZdUhjVMILIUJqaJwdEqG7dr9VWqmrDc0K6:wNRMfGuILIWquwdU+NDc
- TLSH T135E48E6AABA505E9C1B7C17D85178613F776B0491320CBDB53E085B92F13AE82F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.