General
- Target SecurityHealthSystray.exe
- Size 33.4MB
- Sample260723-jdvvtsfq4s
- SHA256 8d0cfaad5979ba77491dcfd1ad85509005ed8ee406435b0b6fc88aee862eeb6e
- MD5 3bc3da3d05c1839f7b3d0b0d4ef7c7cd
- SHA1 4d221e7c23d8b13c62001e8f0d34327f86a545cf
- SHA512 9d17e5402bc88dd53453cf25b3d91bd5f8775c3eb4c819203874f306e1625c97b6ec015236cad23dcce28b7e20b1069a4f13f876652587563b84ff5c5b986ee5
- SSDEEP 786432:MYqiW7rXsrnryKvuToWAGWJtZq5pzVQwt7eph/S3PA:M/7r8rnrt0oZ5Dq5pqwNmNS3P
- TLSH T1937733D996E02D27EC56923D9BA3E525E2E5B1302B238D4E039C57B52FB7288043D7F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SecurityHealthSystray.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecurityHealthSystray.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target SecurityHealthSystray.exe
- Size 33.4MB
- SHA256 8d0cfaad5979ba77491dcfd1ad85509005ed8ee406435b0b6fc88aee862eeb6e
- MD5 3bc3da3d05c1839f7b3d0b0d4ef7c7cd
- SHA1 4d221e7c23d8b13c62001e8f0d34327f86a545cf
- SHA512 9d17e5402bc88dd53453cf25b3d91bd5f8775c3eb4c819203874f306e1625c97b6ec015236cad23dcce28b7e20b1069a4f13f876652587563b84ff5c5b986ee5
- SSDEEP 786432:MYqiW7rXsrnryKvuToWAGWJtZq5pzVQwt7eph/S3PA:M/7r8rnrt0oZ5Dq5pqwNmNS3P
- TLSH T1937733D996E02D27EC56923D9BA3E525E2E5B1302B238D4E039C57B52FB7288043D7F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1