General
- Target fansign-1785692898214.jpg
- Size 163KB
- Sample260802-xpdycawsa1
- SHA256 c9764ab374847bde6e204a9a0f3cd56970f7b1ff553635cb4daa8f542c98ea05
- MD5 988d6f382702ebf00dc0a6eb81e82456
- SHA1 1238f1fae02b8a3ebbd80ebc515c55f98396784a
- SHA512 a3745442df3d20b1d46f69492539378b21ac97976a44e0c3eab5f0c77b4740362fc331e7ca16051cb4de0c51f2c62ec817dc0b08c44e4d63559f04771065d9c4
- SSDEEP 3072:3mSOGIky4X/uQtvHjbo9W2Jx44ngADYdljl88Lh/8MllxI0XB1DTp00j/V:3fOWy4X/9E02JxVMdljlHlDrxLR00j9
- TLSH T13BF3123AFF31BA5AA81F781C75BDA1629BFC26A51C091CC0A7B36D51C2D034AE58D14F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fansign-1785692898214.jpg
Resource
win10ltsc2021-20260513-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target fansign-1785692898214.jpg
- Size 163KB
- SHA256 c9764ab374847bde6e204a9a0f3cd56970f7b1ff553635cb4daa8f542c98ea05
- MD5 988d6f382702ebf00dc0a6eb81e82456
- SHA1 1238f1fae02b8a3ebbd80ebc515c55f98396784a
- SHA512 a3745442df3d20b1d46f69492539378b21ac97976a44e0c3eab5f0c77b4740362fc331e7ca16051cb4de0c51f2c62ec817dc0b08c44e4d63559f04771065d9c4
- SSDEEP 3072:3mSOGIky4X/uQtvHjbo9W2Jx44ngADYdljl88Lh/8MllxI0XB1DTp00j/V:3fOWy4X/9E02JxVMdljlHlDrxLR00j9
- TLSH T13BF3123AFF31BA5AA81F781C75BDA1629BFC26A51C091CC0A7B36D51C2D034AE58D14F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1