General
- Target SecurityHealthSystray.exe
- Size 85.2MB
- Sample260722-q41mbsap2v
- SHA256 d3e0d813221c7b7db59178c07b3428c68d38c6431abb9d085a319b3fd1f179f2
- MD5 f1b27377041d787342fdf14552828371
- SHA1 e3f1a4d28c4da4c97793c5ca5844895b19380dc3
- SHA512 ef1528abb515fbbb2f38da067be61e7f2cef520786a55acc7c8d4b30562dbefac6807dda3870cb0bc338fa08efccfed1833ce5be40bc406379238e41d0e90bad
- SSDEEP 1572864:V/qr8rZD48zVtrioTPqib8Sc/JUNnN0/utd0xyRrt0oZ5Dq5+swNqWK:ttrZDZtrio2iASc/iFN0/kd0x0Z1e+V
- TLSH T1EA1833C4CAB83A53F915DB75D6A2BE38D4E621282FA34E0F13C493713777188457AAB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SecurityHealthSystray.exe
Resource
win10ltsc2021-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
SecurityHealthSystray.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target SecurityHealthSystray.exe
- Size 85.2MB
- SHA256 d3e0d813221c7b7db59178c07b3428c68d38c6431abb9d085a319b3fd1f179f2
- MD5 f1b27377041d787342fdf14552828371
- SHA1 e3f1a4d28c4da4c97793c5ca5844895b19380dc3
- SHA512 ef1528abb515fbbb2f38da067be61e7f2cef520786a55acc7c8d4b30562dbefac6807dda3870cb0bc338fa08efccfed1833ce5be40bc406379238e41d0e90bad
- SSDEEP 1572864:V/qr8rZD48zVtrioTPqib8Sc/JUNnN0/utd0xyRrt0oZ5Dq5+swNqWK:ttrZDZtrio2iASc/iFN0/kd0x0Z1e+V
- TLSH T1EA1833C4CAB83A53F915DB75D6A2BE38D4E621282FA34E0F13C493713777188457AAB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1