General
- Target 9444 Unban V1.exe
- Size 158KB
- Sample260731-fn1x2sda52
- SHA256 5a19303c4c4d70041dbda0d1121ec5af18578f901dde61c2a89dce263a4402c2
- MD5 2a64d021236fb76ca8542d91810a010d
- SHA1 d65cb43378d208e61cf838692731bad7597f6729
- SHA512 cd8a717c7a95f7e1ed838921eb3252fffaf7be297b3fd4180dd62ad51206e907fb96a89fa944e0552f9064f89fe414e465b3771e8133b61bbaddc4a7e3dfc943
- SSDEEP 3072:9/25jvDSgsqsb5Uh28vAbTV1WW69B9VjMdxPedN9ug0z9TBfFSx3V/0sPXn+0Omm:wtzsb5Uh28+V1WW69B9VjMdxPedN9ugU
- TLSH T1A2F36A9BB2E01188EBB581F6D5520786EB7174710715A3DB1B7863B72B2B8C68F3C394
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9444 Unban V1.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
9444 Unban V1.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 9444 Unban V1.exe
- Size 158KB
- SHA256 5a19303c4c4d70041dbda0d1121ec5af18578f901dde61c2a89dce263a4402c2
- MD5 2a64d021236fb76ca8542d91810a010d
- SHA1 d65cb43378d208e61cf838692731bad7597f6729
- SHA512 cd8a717c7a95f7e1ed838921eb3252fffaf7be297b3fd4180dd62ad51206e907fb96a89fa944e0552f9064f89fe414e465b3771e8133b61bbaddc4a7e3dfc943
- SSDEEP 3072:9/25jvDSgsqsb5Uh28vAbTV1WW69B9VjMdxPedN9ug0z9TBfFSx3V/0sPXn+0Omm:wtzsb5Uh28+V1WW69B9VjMdxPedN9ugU
- TLSH T1A2F36A9BB2E01188EBB581F6D5520786EB7174710715A3DB1B7863B72B2B8C68F3C394
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Server Software Component: Terminal Services DLL
-
Disables service(s)
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Stops running service(s)
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
2Service Execution
2Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Component Object Model Hijacking
1Server Software Component
1Terminal Services DLL
1