General
- Target Nowy projekt (14).png
- Size 202KB
- Sample260803-shseyaek5v
- SHA256 3b17d3bd539d9e7d105a2f1dd9226cafd70b54d1d7b20f5199a79f04f56151bd
- MD5 08812e507afb90d1c20c013c9161ad4e
- SHA1 6e18aa6d6f8af07cf822ba40b36cf74fb29d1ad0
- SHA512 378fb9e83466d661272621ae73295fc8932bd417f61115207bab5477bca930bde902bb0ddce2f40b3f0116e043af72b15a4b35eba49b8d484da899aba847cbd3
- SSDEEP 6144:LCbswHGYnwllgflXSGQjFTk1mIIINRgjB2q22gMd:QtmYwkflXNoFsIINW+vq
- TLSH T14314F126C330D64ECDB74779A6A60F725F9787F150CA4732EB58142D2C60FA92DBAC41
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Nowy projekt (14).png
Resource
win10v2004-20260513-en
26 signatures
900 seconds
Malware Config
Targets
-
- Target Nowy projekt (14).png
- Size 202KB
- SHA256 3b17d3bd539d9e7d105a2f1dd9226cafd70b54d1d7b20f5199a79f04f56151bd
- MD5 08812e507afb90d1c20c013c9161ad4e
- SHA1 6e18aa6d6f8af07cf822ba40b36cf74fb29d1ad0
- SHA512 378fb9e83466d661272621ae73295fc8932bd417f61115207bab5477bca930bde902bb0ddce2f40b3f0116e043af72b15a4b35eba49b8d484da899aba847cbd3
- SSDEEP 6144:LCbswHGYnwllgflXSGQjFTk1mIIINRgjB2q22gMd:QtmYwkflXNoFsIINW+vq
- TLSH T14314F126C330D64ECDB74779A6A60F725F9787F150CA4732EB58142D2C60FA92DBAC41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1