General
- Target bb3074248af26c720622052b537df31e074bfd0fcb9da1ff17299b3f4cfc39b9
- Size 5.4MB
- Sample260805-d3dd7axdrb
- SHA256 bb3074248af26c720622052b537df31e074bfd0fcb9da1ff17299b3f4cfc39b9
- MD5 713818d3889876f7d9554075dd4cdc0a
- SHA1 5e858725e4f3ef3e340eac476fe0a65844307982
- SHA512 34b153390e7d7b8c6da54505de57c490fec48a6f20f53ef969388d7632bf76e401235b92ce5c36acc92f0e75160f45dd95e342b0b233a0bde434e47b4d948fd1
- SSDEEP 98304:TtVYDxC4iUM4Fu7Ps31QWtLNnfJXzPT7R9UPEXhMjgScPXdIIr1OXDpHDGyp6M2n:T7YDu70jfdPT7jRHXdIIrepHKa6PaLwT
- TLSH T1E5463345FC23AE6AECDF0F346E044DC8EA459734ED5249829BEFD98D4884F863F60661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
inst_smt012.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
inst_smt012.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target inst_smt012.exe
- Size 55.2MB
- SHA256 690839bcb7d335658a681ccd738d968a2812552be1839fbcbd06cbf814c0c945
- MD5 11105a8f0e1d34111c6e356a527c315d
- SHA1 29135be068bb4042a61021395b80f6788c05a637
- SHA512 708b6fd1ccdabf6b7b49877bb52057c985a4c0934f91566de39680aac8e464a365adf477718990c9052891cc5be2d142173ee06289b14f520c0d53069bfb3e57
- SSDEEP 196608:KnnmbV2qWwRNTc+u1aZfO8pP+QDhb6Z/LzEnSQ5Ps6N:sSRe9QDt
- TLSH T173C78406F702899AD4799338488B4F91B372ECF14AB6972323B8733D2EFA35C5E91545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1