General
- Target AdBlock360Setup.exe
- Size 736KB
- Sample260724-rmh7dssbne
- SHA256 1eb1056655168a7c4ed81a07425f5f80c28c7f4448552923de1cfbd23188a4c7
- MD5 45c31bae4ec866546631dc8c2a72b248
- SHA1 db58be0fb00f9b83f1ebba508ff046aec8d66265
- SHA512 cdfd7b734378c394f826f673a9ace1d31740dcd2703e9ef3f12565df1abd411bf1f456c46bb751b935c6809f59d8ef313f7e3de1ffb132152e874460ec125307
- SSDEEP 12288:fEoX5Mw6IOEXkSY4Cr23ph0lhSMXli3B1du5qSg:fE+MgOEUSHCS5h0lhSMXlkBXuYz
- TLSH T1C2F48C15F7B440F9E0A6C275896A497AFB727C8743A8974B03B0665E1F376980E3E331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AdBlock360Setup.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
AdBlock360Setup.exe
Resource
win11ltsc2024-20260709-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target AdBlock360Setup.exe
- Size 736KB
- SHA256 1eb1056655168a7c4ed81a07425f5f80c28c7f4448552923de1cfbd23188a4c7
- MD5 45c31bae4ec866546631dc8c2a72b248
- SHA1 db58be0fb00f9b83f1ebba508ff046aec8d66265
- SHA512 cdfd7b734378c394f826f673a9ace1d31740dcd2703e9ef3f12565df1abd411bf1f456c46bb751b935c6809f59d8ef313f7e3de1ffb132152e874460ec125307
- SSDEEP 12288:fEoX5Mw6IOEXkSY4Cr23ph0lhSMXli3B1du5qSg:fE+MgOEUSHCS5h0lhSMXlkBXuYz
- TLSH T1C2F48C15F7B440F9E0A6C275896A497AFB727C8743A8974B03B0665E1F376980E3E331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in Drivers directory
-
Stops running service(s)
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1