General
- Target 8aa9ff1b6b93ad73d00a3efc0a947bf4db0a1d5ae1f78891261e4ea8a4332e45
- Size 5.0MB
- Sample260801-g47afazejc
- SHA256 8aa9ff1b6b93ad73d00a3efc0a947bf4db0a1d5ae1f78891261e4ea8a4332e45
- MD5 2f3cbc0c74e1a6c1a6c15e1fa09d01eb
- SHA1 7f18e28d1d33eb09c81f854ebfffdf253d99a9fd
- SHA512 9b470430836d95f95e8277a7fcb89b3a84782846e19c99a43880e8ca737e53979fec007435bc818eda2bd7b24b9e1942238810767f0ff6578e22ec22da9c72fa
- SSDEEP 98304:SAW6Ku9uVd2wCINfT5IabWQdMOsBhXMJ9gfg:M6KGMd2KhdMaJ9Y
- TLSH T11036BF11FB8040B2E5A3413882BAEB7B997DB930172485C763E41DBA4D316D27B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8aa9ff1b6b93ad73d00a3efc0a947bf4db0a1d5ae1f78891261e4ea8a4332e45.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
8aa9ff1b6b93ad73d00a3efc0a947bf4db0a1d5ae1f78891261e4ea8a4332e45.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 8aa9ff1b6b93ad73d00a3efc0a947bf4db0a1d5ae1f78891261e4ea8a4332e45
- Size 5.0MB
- SHA256 8aa9ff1b6b93ad73d00a3efc0a947bf4db0a1d5ae1f78891261e4ea8a4332e45
- MD5 2f3cbc0c74e1a6c1a6c15e1fa09d01eb
- SHA1 7f18e28d1d33eb09c81f854ebfffdf253d99a9fd
- SHA512 9b470430836d95f95e8277a7fcb89b3a84782846e19c99a43880e8ca737e53979fec007435bc818eda2bd7b24b9e1942238810767f0ff6578e22ec22da9c72fa
- SSDEEP 98304:SAW6Ku9uVd2wCINfT5IabWQdMOsBhXMJ9gfg:M6KGMd2KhdMaJ9Y
- TLSH T11036BF11FB8040B2E5A3413882BAEB7B997DB930172485C763E41DBA4D316D27B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1