General
- Target 2f8689b38449a7a1e3e0e01532b0e9bf934d91997995f550808a975838e11e97
- Size 5.1MB
- Sample260730-dvlqlaycmd
- SHA256 2f8689b38449a7a1e3e0e01532b0e9bf934d91997995f550808a975838e11e97
- MD5 4216905fe5a9478fa34324b1170b6d8d
- SHA1 92a1868c0b0aec80bc6ff799f17f0e046a390e3c
- SHA512 91745e04a5b69efe4f884dd5315b0da4ea3f7f54092e6a9867149cfef9d49b67d4d5b19f98b1998926ffd8b24daecb65dc52b2b81879ba39e1da099633aa8801
- SSDEEP 98304:seKdjEJtOOFOnEdxEEuOeSEdROsBh5MJ9gfrdv:0djEkOFCe4dRcJ9Y5v
- TLSH T15636BF12FA8040B2E5A3413881BAAB7B9D7DBD30172485C763E41DBA4D316D27B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2f8689b38449a7a1e3e0e01532b0e9bf934d91997995f550808a975838e11e97.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2f8689b38449a7a1e3e0e01532b0e9bf934d91997995f550808a975838e11e97.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2f8689b38449a7a1e3e0e01532b0e9bf934d91997995f550808a975838e11e97
- Size 5.1MB
- SHA256 2f8689b38449a7a1e3e0e01532b0e9bf934d91997995f550808a975838e11e97
- MD5 4216905fe5a9478fa34324b1170b6d8d
- SHA1 92a1868c0b0aec80bc6ff799f17f0e046a390e3c
- SHA512 91745e04a5b69efe4f884dd5315b0da4ea3f7f54092e6a9867149cfef9d49b67d4d5b19f98b1998926ffd8b24daecb65dc52b2b81879ba39e1da099633aa8801
- SSDEEP 98304:seKdjEJtOOFOnEdxEEuOeSEdROsBh5MJ9gfrdv:0djEkOFCe4dRcJ9Y5v
- TLSH T15636BF12FA8040B2E5A3413881BAAB7B9D7DBD30172485C763E41DBA4D316D27B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1