General
- Target 776208205c3cb773e917c659d10fa7e9ee8193764d2c38e877ace76f3e80dc4e
- Size 5.4MB
- Sample260805-a8delabc37
- SHA256 776208205c3cb773e917c659d10fa7e9ee8193764d2c38e877ace76f3e80dc4e
- MD5 ecc6078ddd9fb63a05ced24b342b0590
- SHA1 0355494e24a957cd6802c8b6476bb94ccb8fcafc
- SHA512 4c2e054a758b08c035904462a8902a9b509e78a034a108b9a45b6f8c13f122031350bed519a49f4a10230fde355eb374010f21c22a76dc45b628239cf0010411
- SSDEEP 98304:myJOksLHaXHrVnExlceMhdMCoB4ClJXzPT7R9UPEXhMjgScPXdIIr1OXDpHDGyp0:HfrHGlc9OrfdPT7jRHXdIIrepHKa6PaW
- TLSH T1F7463346F5639A9EFCEF4F38CD001EC99A888628EC424C65DEFED81D5D89F897B10605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
inst_smt008.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
inst_smt008.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target inst_smt008.exe
- Size 55.2MB
- SHA256 41a28a96e8f14aa575f0835edea18ad8a8c33c87fddd3df2dce076121741f7cd
- MD5 157e81292c63184a005be575a250090e
- SHA1 cf1948bb8a34d1de1b4db48630757f54e9a5299f
- SHA512 8e4f628efd14eb50f344d18c4851ec2a0ff65b135e3d67e3b202bd7bd91e5363c35d8a535cd09bf165e62403c23d13ec408b6bc11adf63749fe2cc0eeafc6125
- SSDEEP 196608:InnmbV2qWwRNTc+u1aZfO8pP+QDhb6Z/LzEnSQ5Ps6j:iSRe9QDD
- TLSH T1F0C78406F702899AD4799338488B4F91B372ECF14AB6972323B8733D2EFA35C5E91545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1