General
- Target map.exe
- Size 12.0MB
- Sample260730-qkf4ksaa97
- SHA256 87626a126256bdfd04f9fe5ae1e3dfdd25ef12d7cf752dbf3db5069022cb0a11
- MD5 a1c7578c52d04a16608370959e476138
- SHA1 f095a5c3ea2e53743d285a6688fb681320a64271
- SHA512 a524b4b2ec04c4fb4095af6e6cfbc272267e22bf6b55907924ace81402109f3f8f02fee4d7b1eb25863eb7598152435e358e8b940ab1ce2ff2a11b17dda9b8a3
- SSDEEP 196608:QxqBCJgcuk2ScUvWMt1wye0XCWOYxtKaD1+MvyhxvWWdlNsK6xFIgpiv+Fy0U:QxqB7ks2rt1IS7B+MvyLWcw3xFFKnV
- TLSH T1DFD6128664E5C2BDC8058474E6491DFDF0EA78198DFD4A3A7F8B48127A70D18C8F5BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
map.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
map.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target map.exe
- Size 12.0MB
- SHA256 87626a126256bdfd04f9fe5ae1e3dfdd25ef12d7cf752dbf3db5069022cb0a11
- MD5 a1c7578c52d04a16608370959e476138
- SHA1 f095a5c3ea2e53743d285a6688fb681320a64271
- SHA512 a524b4b2ec04c4fb4095af6e6cfbc272267e22bf6b55907924ace81402109f3f8f02fee4d7b1eb25863eb7598152435e358e8b940ab1ce2ff2a11b17dda9b8a3
- SSDEEP 196608:QxqBCJgcuk2ScUvWMt1wye0XCWOYxtKaD1+MvyhxvWWdlNsK6xFIgpiv+Fy0U:QxqB7ks2rt1IS7B+MvyLWcw3xFFKnV
- TLSH T1DFD6128664E5C2BDC8058474E6491DFDF0EA78198DFD4A3A7F8B48127A70D18C8F5BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1