General
- Target DataPack1-0-0.exe
- Size 16.3MB
- Sample260730-15pxbs1wdv
- SHA256 b6be2508d79b4cf942f452eff33342db43f9c8f3f52cb8527fda1de24e5c56a8
- MD5 dea7fdeb4254058cbf7e5264bc735eed
- SHA1 dcc6f02f5de512cdb591847d53519de3cf6b891e
- SHA512 943d20052fd85a056d08cf6e08ca46007d5e873a2dbf4ebeb59f7c9bffc500f96fb29c8fbf56b0fb04826c4e9952837fa22d2200cea9c7e1d0dbf50d06720ab8
- SSDEEP 393216:HLgIfUKOcR10Udq1B79zCQCHsn4qSRS0piv02:r58KPR10Ug1zzIgzSw0ps
- TLSH T1DB07339551D10963F4DBB13D56BA86A3D17271106B238A6F0BA043593FAB3F10E3BBE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DataPack1-0-0.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
DataPack1-0-0.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target DataPack1-0-0.exe
- Size 16.3MB
- SHA256 b6be2508d79b4cf942f452eff33342db43f9c8f3f52cb8527fda1de24e5c56a8
- MD5 dea7fdeb4254058cbf7e5264bc735eed
- SHA1 dcc6f02f5de512cdb591847d53519de3cf6b891e
- SHA512 943d20052fd85a056d08cf6e08ca46007d5e873a2dbf4ebeb59f7c9bffc500f96fb29c8fbf56b0fb04826c4e9952837fa22d2200cea9c7e1d0dbf50d06720ab8
- SSDEEP 393216:HLgIfUKOcR10Udq1B79zCQCHsn4qSRS0piv02:r58KPR10Ug1zzIgzSw0ps
- TLSH T1DB07339551D10963F4DBB13D56BA86A3D17271106B238A6F0BA043593FAB3F10E3BBE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1