General
- Target Exm Premium.exe
- Size 10.7MB
- Sample260804-r9pyfsce65
- SHA256 590b76fbaa1e2e318ac992d70e5d387145bc714802ea6efe35fcf4160a089ebf
- MD5 cac7debea1217a51c3720e9dfa08f1cc
- SHA1 63dc63bde19edb5d6aaf668a6f5dedb0139e8f96
- SHA512 cc7f1325c5747eb12f89f58ffa2d6a1beab06e812efe770a803192d10ea28589623030d918893344222c65babe3ba5d731fe55b650c453561594e7f2da4847d1
- SSDEEP 98304:Vs+06mU+/vUIEGXqAB2qldbU6fRkze3ykimB1PF2EEaO:VkUIEGaABtlN7L3ykim2
- TLSH T1C3B64A47ECA545E8C5AED135CA669252BB707C485B3027DB2B60F3283F76BD0AE79310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Exm Premium.exe
Resource
win10v2004-20260513-en
13 signatures
60 seconds
Behavioral task
behavioral2
Sample
Exm Premium.exe
Resource
win11ltsc2024-20260709-en
13 signatures
60 seconds
Malware Config
Targets
-
- Target Exm Premium.exe
- Size 10.7MB
- SHA256 590b76fbaa1e2e318ac992d70e5d387145bc714802ea6efe35fcf4160a089ebf
- MD5 cac7debea1217a51c3720e9dfa08f1cc
- SHA1 63dc63bde19edb5d6aaf668a6f5dedb0139e8f96
- SHA512 cc7f1325c5747eb12f89f58ffa2d6a1beab06e812efe770a803192d10ea28589623030d918893344222c65babe3ba5d731fe55b650c453561594e7f2da4847d1
- SSDEEP 98304:Vs+06mU+/vUIEGXqAB2qldbU6fRkze3ykimB1PF2EEaO:VkUIEGaABtlN7L3ykim2
- TLSH T1C3B64A47ECA545E8C5AED135CA669252BB707C485B3027DB2B60F3283F76BD0AE79310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates new service(s)
-
Executes dropped EXE
-
Modifies file permissions
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1