General
- Target iExplore.exe
- Size 1.7MB
- Sample260802-ks31esyhra
- SHA256 d4ac5b3c525a5fd94019d80ff81b552e73b19b1bd0a554b9609cdd5e1b00955a
- MD5 6d622dcc87edc9a7b10d35372ade816b
- SHA1 47d98825b03c507b85dec02a2297e03ebc925f30
- SHA512 ed06f872a7c66ffeeb8cb8f6fedca06ccabf623f9cd188c4c7105428e8d6521ef8da0bac0564e14d2da914d2846369a9c04577a8cf7fb80cb62831e5497f2a58
- SSDEEP 49152:KpEsgw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijig:0wYJYW
- TLSH T1A0857C2177E90274F2B3CA709975C222D5B5B8626F32D7CF42911A1D1E37ED09E36B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
iExplore.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target iExplore.exe
- Size 1.7MB
- SHA256 d4ac5b3c525a5fd94019d80ff81b552e73b19b1bd0a554b9609cdd5e1b00955a
- MD5 6d622dcc87edc9a7b10d35372ade816b
- SHA1 47d98825b03c507b85dec02a2297e03ebc925f30
- SHA512 ed06f872a7c66ffeeb8cb8f6fedca06ccabf623f9cd188c4c7105428e8d6521ef8da0bac0564e14d2da914d2846369a9c04577a8cf7fb80cb62831e5497f2a58
- SSDEEP 49152:KpEsgw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijig:0wYJYW
- TLSH T1A0857C2177E90274F2B3CA709975C222D5B5B8626F32D7CF42911A1D1E37ED09E36B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Netsh Helper DLL
1