General
- Target 4160806f89f249d4148ba4b52e51798bccb7e5232066456bd0158ed5af70ec54
- Size 5.1MB
- Sample260730-t5eyssscla
- SHA256 4160806f89f249d4148ba4b52e51798bccb7e5232066456bd0158ed5af70ec54
- MD5 3d86a02b0679971f46c0c1e832f0eece
- SHA1 cbe7a1fec9bcee4324fc3f64f4ceaf3b0adcee1c
- SHA512 249c71bf2009afbea855cb73886c923b4b9c763ae4cbd074d72c644f9b9eba5ed75139cf91ca3f0af80355abdc863289b9ae46981e675e6b4761b0d1f7d1b5b4
- SSDEEP 98304:JoblE3iUGlo7LfAdffVfSfZjWmM8dLOsBh2MJ9gf6U7T:w+3i34AdfkxdLrJ9YL
- TLSH T13236CF12FA8040B2E5B3413982BAAB7B897DBD30172485C763E41D7A4E316D17B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4160806f89f249d4148ba4b52e51798bccb7e5232066456bd0158ed5af70ec54.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
4160806f89f249d4148ba4b52e51798bccb7e5232066456bd0158ed5af70ec54.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4160806f89f249d4148ba4b52e51798bccb7e5232066456bd0158ed5af70ec54
- Size 5.1MB
- SHA256 4160806f89f249d4148ba4b52e51798bccb7e5232066456bd0158ed5af70ec54
- MD5 3d86a02b0679971f46c0c1e832f0eece
- SHA1 cbe7a1fec9bcee4324fc3f64f4ceaf3b0adcee1c
- SHA512 249c71bf2009afbea855cb73886c923b4b9c763ae4cbd074d72c644f9b9eba5ed75139cf91ca3f0af80355abdc863289b9ae46981e675e6b4761b0d1f7d1b5b4
- SSDEEP 98304:JoblE3iUGlo7LfAdffVfSfZjWmM8dLOsBh2MJ9gf6U7T:w+3i34AdfkxdLrJ9YL
- TLSH T13236CF12FA8040B2E5B3413982BAAB7B897DBD30172485C763E41D7A4E316D17B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1