General
- Target agent-windows-amd64-48fbf708 (2).exe
- Size 13.1MB
- Sample260804-krmbaagc99
- SHA256 a457ef7ea760f208ac0dcbfb06655f474b9548a284c1907f092b08446f9d35dc
- MD5 889cc0350db2da2c95f7698b8c8d108a
- SHA1 b6a5f86cbf549b88e6d98cfd0b6131ff1b9dc297
- SHA512 5de428c0ceb5f8c11fa5d0b602dc30f4f974a0324fa26a7314f53c99c818c0f183a49a49e3af173a923d20067308b7f13b9368c54806c644a352b03ec703b637
- SSDEEP 98304:a4clciEiJSvdMikDi/dklcuZQPSnEUrpFmmOK/XDbFHtzOi/CP:fjKyGIkl9aV2Db9
- TLSH T164D62757E9A915E8C0ADD530C5B6A223BB717C494B2033D71F50B6386F76BE0ADBA310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent-windows-amd64-48fbf708 (2).exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
agent-windows-amd64-48fbf708 (2).exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target agent-windows-amd64-48fbf708 (2).exe
- Size 13.1MB
- SHA256 a457ef7ea760f208ac0dcbfb06655f474b9548a284c1907f092b08446f9d35dc
- MD5 889cc0350db2da2c95f7698b8c8d108a
- SHA1 b6a5f86cbf549b88e6d98cfd0b6131ff1b9dc297
- SHA512 5de428c0ceb5f8c11fa5d0b602dc30f4f974a0324fa26a7314f53c99c818c0f183a49a49e3af173a923d20067308b7f13b9368c54806c644a352b03ec703b637
- SSDEEP 98304:a4clciEiJSvdMikDi/dklcuZQPSnEUrpFmmOK/XDbFHtzOi/CP:fjKyGIkl9aV2Db9
- TLSH T164D62757E9A915E8C0ADD530C5B6A223BB717C494B2033D71F50B6386F76BE0ADBA310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1