General
- Target SecurityHealthSystray.exe
- Size 85.2MB
- Sample260723-hc784afk41
- SHA256 5252e82bf6d1a45b242ddf97cc7107d35ab5f2bb690526b9d7e1dc19b6085309
- MD5 40a26c576790592b5feb2d8cc79bf0d3
- SHA1 432fa19c3cbf5d0f3da1877c151db0aade8b4136
- SHA512 d0710ea499ec2dd03b236f0d539358e0f6d6f6472bd87c8899bca6d9cc05fefcbd9261f76d6fade00ff8a85f4b6979ed75ce66e6644ad054e06cb088b6a17d41
- SSDEEP 1572864:K/Lr8rZD48zVtrioTPqib8Sc/JUNnN0/utd0xyRrt0oZ5Dq5+swNqWK:K8rZDZtrio2iASc/iFN0/kd0x0Z1e+V
- TLSH T1C71833C4CAB93A53F916CA75D6A2BE38D4E6212C2FA34E0F13C4937137771894576AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SecurityHealthSystray.exe
Resource
win10ltsc2021-20260513-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target SecurityHealthSystray.exe
- Size 85.2MB
- SHA256 5252e82bf6d1a45b242ddf97cc7107d35ab5f2bb690526b9d7e1dc19b6085309
- MD5 40a26c576790592b5feb2d8cc79bf0d3
- SHA1 432fa19c3cbf5d0f3da1877c151db0aade8b4136
- SHA512 d0710ea499ec2dd03b236f0d539358e0f6d6f6472bd87c8899bca6d9cc05fefcbd9261f76d6fade00ff8a85f4b6979ed75ce66e6644ad054e06cb088b6a17d41
- SSDEEP 1572864:K/Lr8rZD48zVtrioTPqib8Sc/JUNnN0/utd0xyRrt0oZ5Dq5+swNqWK:K8rZDZtrio2iASc/iFN0/kd0x0Z1e+V
- TLSH T1C71833C4CAB93A53F916CA75D6A2BE38D4E6212C2FA34E0F13C4937137771894576AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1