General
- Target loader2.exe
- Size 28.8MB
- Sample260724-v4dvsavbnh
- SHA256 5c158b857f031d8e021533b70f343b47a21c9ca5438b2f5641d7f6e636711ff9
- MD5 1e4ebebb402e0cfc96c923788bb0a81c
- SHA1 c9daee4eb6c6fa9c65e7ef02f021ad9875404703
- SHA512 72977f584245d98f25ce0164e842414abcf598ff66dbff016b9c9914400ca2a780c39c8ff9639ccae0704880ef0e7006e3e1f09d94d8452676e8421789506ee9
- SSDEEP 393216:qDEBxza0cSj2gGhJieHWzFti0ucGj1+UfE2FGExtRGM82kNn+XDz9hLWjrsNFYZi:qIxOITN9VpoPxG2k9+XDz9hLEwY34cM
- TLSH T16667330760F413FBE619FEB90DB5CBEAB188ECB74D2645A820E1F3081FB97914766521
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader2.exe
Resource
win10v2004-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
loader2.exe
Resource
win11ltsc2024-20260709-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target loader2.exe
- Size 28.8MB
- SHA256 5c158b857f031d8e021533b70f343b47a21c9ca5438b2f5641d7f6e636711ff9
- MD5 1e4ebebb402e0cfc96c923788bb0a81c
- SHA1 c9daee4eb6c6fa9c65e7ef02f021ad9875404703
- SHA512 72977f584245d98f25ce0164e842414abcf598ff66dbff016b9c9914400ca2a780c39c8ff9639ccae0704880ef0e7006e3e1f09d94d8452676e8421789506ee9
- SSDEEP 393216:qDEBxza0cSj2gGhJieHWzFti0ucGj1+UfE2FGExtRGM82kNn+XDz9hLWjrsNFYZi:qIxOITN9VpoPxG2k9+XDz9hLEwY34cM
- TLSH T16667330760F413FBE619FEB90DB5CBEAB188ECB74D2645A820E1F3081FB97914766521
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1