General
- Target spotify.exe
- Size 8.6MB
- Sample260724-y9zafssdrd
- SHA256 6704bd6545d44ec1ac384fc16e3f2c5282ada1b65ddc593eda820292661c6b79
- MD5 68e289a18ec1790e3ece6d51565d8b4b
- SHA1 373277ffa1f8760b98310f2613ab3b0f3cb56aeb
- SHA512 d7d04d4a05616541ca2c75e1dd5bae7e1102220cfc05a4bed161fff6403604f93887253f8e422cbb45d601d68719fff083cecbad6f4e78874a2b626a7f61b0b0
- SSDEEP 196608:Lhcd3wLC0XEpXnH2ph1iut1/1QpL0uQg+RetK7vocgpVFSZ:LhAE7XEAphVtrQSg+RuK7vZgtS
- TLSH T10796335CB7A019FAF8F7803C9E91D811E7B274512F62D2EF17B049190E3B6E44E386A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
spotify.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
spotify.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target spotify.exe
- Size 8.6MB
- SHA256 6704bd6545d44ec1ac384fc16e3f2c5282ada1b65ddc593eda820292661c6b79
- MD5 68e289a18ec1790e3ece6d51565d8b4b
- SHA1 373277ffa1f8760b98310f2613ab3b0f3cb56aeb
- SHA512 d7d04d4a05616541ca2c75e1dd5bae7e1102220cfc05a4bed161fff6403604f93887253f8e422cbb45d601d68719fff083cecbad6f4e78874a2b626a7f61b0b0
- SSDEEP 196608:Lhcd3wLC0XEpXnH2ph1iut1/1QpL0uQg+RetK7vocgpVFSZ:LhAE7XEAphVtrQSg+RuK7vZgtS
- TLSH T10796335CB7A019FAF8F7803C9E91D811E7B274512F62D2EF17B049190E3B6E44E386A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1