General
- Target payload(1).exe
- Size 2.0MB
- Sample260728-y5f83sgr2w
- SHA256 7539c48603f670a8a14c59391c1bbc01371635b89ea06f2f68cf273ac709f8bb
- MD5 2e4077197293253a06bdd46ce433b505
- SHA1 c57ef42c52efa15f8f9ec2cf14e1d6d94d925c9e
- SHA512 8b89d8139ac28e76c2f8e4ae367c34e4162ccddc2c97295e59717c80d4e2304339d2b44e6ed187ef7d99175f8aeaeef83442b09e5f1c4861627d3f8552d32ac2
- SSDEEP 49152:EBkjNIR9hbVDy/mqtP3G3c/3eWJrePHfR:qhb+osv
- TLSH T14AA58D56E2B360ECC66BC171875BEA67F674742C41207E7B9990C7302E72F50271AF2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
payload(1).exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload(1).exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target payload(1).exe
- Size 2.0MB
- SHA256 7539c48603f670a8a14c59391c1bbc01371635b89ea06f2f68cf273ac709f8bb
- MD5 2e4077197293253a06bdd46ce433b505
- SHA1 c57ef42c52efa15f8f9ec2cf14e1d6d94d925c9e
- SHA512 8b89d8139ac28e76c2f8e4ae367c34e4162ccddc2c97295e59717c80d4e2304339d2b44e6ed187ef7d99175f8aeaeef83442b09e5f1c4861627d3f8552d32ac2
- SSDEEP 49152:EBkjNIR9hbVDy/mqtP3G3c/3eWJrePHfR:qhb+osv
- TLSH T14AA58D56E2B360ECC66BC171875BEA67F674742C41207E7B9990C7302E72F50271AF2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1