General
- Target 23dcddf8cf9f6649c41a6e20cb81b0fbd817ef7ef62a596918d1eba22fe59c6b
- Size 767KB
- Sample260805-bzl6tabf55
- SHA256 23dcddf8cf9f6649c41a6e20cb81b0fbd817ef7ef62a596918d1eba22fe59c6b
- MD5 446695ba6a780dd5666302e1a70ec5f0
- SHA1 4a52f022eb3efff82c61d1762741ebe1a90f2a46
- SHA512 f94db56c9e388cc5b0311898e47e726b5f6e3b58d7ab5983863db66e9b99722ce3b5e0114a2bc43c8bf99de19208a50eba3c232c381c91d06d7d7dba4795e8f8
- SSDEEP 12288:dK/3x5WiQvelDXIxLm3ugTuIMcMmiAMr0eEmFsHzqoHB/7kiWN:e+iQvelDT3uWuvDTr0tmqHG4/AB
- TLSH T158F48C21E6D402EDD277C275DA664802F7B678470B34AEDB0390AA662F279D44F3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
23dcddf8cf9f6649c41a6e20cb81b0fbd817ef7ef62a596918d1eba22fe59c6b.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
23dcddf8cf9f6649c41a6e20cb81b0fbd817ef7ef62a596918d1eba22fe59c6b.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 23dcddf8cf9f6649c41a6e20cb81b0fbd817ef7ef62a596918d1eba22fe59c6b
- Size 767KB
- SHA256 23dcddf8cf9f6649c41a6e20cb81b0fbd817ef7ef62a596918d1eba22fe59c6b
- MD5 446695ba6a780dd5666302e1a70ec5f0
- SHA1 4a52f022eb3efff82c61d1762741ebe1a90f2a46
- SHA512 f94db56c9e388cc5b0311898e47e726b5f6e3b58d7ab5983863db66e9b99722ce3b5e0114a2bc43c8bf99de19208a50eba3c232c381c91d06d7d7dba4795e8f8
- SSDEEP 12288:dK/3x5WiQvelDXIxLm3ugTuIMcMmiAMr0eEmFsHzqoHB/7kiWN:e+iQvelDT3uWuvDTr0tmqHG4/AB
- TLSH T158F48C21E6D402EDD277C275DA664802F7B678470B34AEDB0390AA662F279D44F3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1