General
- Target 4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea.dll
- Size 3.6MB
- Sample260801-wgrzkaee53
- SHA256 4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea
- MD5 4eeffbcc914c35cd0f40c9cd565852cd
- SHA1 b4e5025a7dc93b8208bebd0b248447152a4ae185
- SHA512 604d48ea4299d98a2eb2535b438dccdf0999dcd1ed9d8d9ba989e82d4581ba3baf8a16fd666cb35dd1453f777a5d112042b77e44691506c5533ca8b0c5c1f4b6
- SSDEEP 98304:B+FXiCBTOFtelel1tvuvOebP8OAxXCXWXOSFAnJnh8KP2lL:W8FtEOebPRAxXiWXOSQndPu
- TLSH T10B062373326680A2D3FA8C354933BEF172FA03268F42AC7A5A9D9DD514115F5BA13E13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea.dll
Resource
win10v2004-20260513-en
5 signatures
40 seconds
Behavioral task
behavioral2
Sample
4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea.dll
Resource
win11ltsc2024-20260709-en
5 signatures
40 seconds
Malware Config
Targets
-
- Target 4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea.dll
- Size 3.6MB
- SHA256 4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea
- MD5 4eeffbcc914c35cd0f40c9cd565852cd
- SHA1 b4e5025a7dc93b8208bebd0b248447152a4ae185
- SHA512 604d48ea4299d98a2eb2535b438dccdf0999dcd1ed9d8d9ba989e82d4581ba3baf8a16fd666cb35dd1453f777a5d112042b77e44691506c5533ca8b0c5c1f4b6
- SSDEEP 98304:B+FXiCBTOFtelel1tvuvOebP8OAxXCXWXOSFAnJnh8KP2lL:W8FtEOebPRAxXiWXOSQndPu
- TLSH T10B062373326680A2D3FA8C354933BEF172FA03268F42AC7A5A9D9DD514115F5BA13E13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1