General
- Target Temp.exe
- Size 65.5MB
- Sample260804-r39dhszwcv
- SHA256 33160487147f936e1fd54cffbbfaffd08a025a680be3bec52ff957b5c0a6b100
- MD5 4774bf9b37b1e9fb026fac77ceebd37e
- SHA1 3e94e0e00cee360b5b909496a19fb6d05f28cd65
- SHA512 ee05fff2a9dc0fa151c7a5064e377df0a9eef931c0c029053c70ebf322a3700a7d00dffd5d2fac23287608f9f23256d07b5228a7c6c178dafdd48f66f9c72608
- SSDEEP 1572864:MY4DlsvdrA6SqcnEAGGpWsSU+F7r/NwOxWHtRQNiL/F2fvC5f9mRypJHon6ZNcsJ:+Kvy6TKpWd1iOxWPQ4QXyEaau0mctw
- TLSH T107E7335A024228B4F19BEC34732DF9D0DA4634335E9537710E1BE9E98576EC3EA9270B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Temp.exe
Resource
win10v2004-20260513-en
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
Temp.exe
Resource
win11ltsc2024-20260710-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target Temp.exe
- Size 65.5MB
- SHA256 33160487147f936e1fd54cffbbfaffd08a025a680be3bec52ff957b5c0a6b100
- MD5 4774bf9b37b1e9fb026fac77ceebd37e
- SHA1 3e94e0e00cee360b5b909496a19fb6d05f28cd65
- SHA512 ee05fff2a9dc0fa151c7a5064e377df0a9eef931c0c029053c70ebf322a3700a7d00dffd5d2fac23287608f9f23256d07b5228a7c6c178dafdd48f66f9c72608
- SSDEEP 1572864:MY4DlsvdrA6SqcnEAGGpWsSU+F7r/NwOxWHtRQNiL/F2fvC5f9mRypJHon6ZNcsJ:+Kvy6TKpWd1iOxWPQ4QXyEaau0mctw
- TLSH T107E7335A024228B4F19BEC34732DF9D0DA4634335E9537710E1BE9E98576EC3EA9270B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1