General
- Target UserMode (4).exe
- Size 2.3MB
- Sample260804-2mlmmazvbz
- SHA256 aa3fd202c58db0e0c2ffce0906ecfe9b4efd802e5cde3b576b10f3e7afe3f2fd
- MD5 ac9582bbacf44a2d6c7d90342c621872
- SHA1 0bdd32f76d586bf956e56dba53189cc575330ec3
- SHA512 85348b75b021b2ecba92f131ece723d573a2c8600ede64d512cf948d616661f2b4badaeb33e73ca4d22cc1b31801c9c468f058c90d43e00bbce1bf6b06ee465b
- SSDEEP 24576:sHZZY/yrdsB402sTo41McI2uiQruwxF8ikBcWA4ko+gZ2rPgfGRp+WQOCPTuIaRl:bZNOigVhDv6s9KP8fZN7z/RN5lMFcn
- TLSH T103B58CE952AC01ECE166C138924A5207F7F3BC4D17A0DFFB26D04DA41F1B6D0BA3A695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UserMode (4).exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
UserMode (4).exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target UserMode (4).exe
- Size 2.3MB
- SHA256 aa3fd202c58db0e0c2ffce0906ecfe9b4efd802e5cde3b576b10f3e7afe3f2fd
- MD5 ac9582bbacf44a2d6c7d90342c621872
- SHA1 0bdd32f76d586bf956e56dba53189cc575330ec3
- SHA512 85348b75b021b2ecba92f131ece723d573a2c8600ede64d512cf948d616661f2b4badaeb33e73ca4d22cc1b31801c9c468f058c90d43e00bbce1bf6b06ee465b
- SSDEEP 24576:sHZZY/yrdsB402sTo41McI2uiQruwxF8ikBcWA4ko+gZ2rPgfGRp+WQOCPTuIaRl:bZNOigVhDv6s9KP8fZN7z/RN5lMFcn
- TLSH T103B58CE952AC01ECE166C138924A5207F7F3BC4D17A0DFFB26D04DA41F1B6D0BA3A695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1