General
- Target Optimizer-16.7.exe
- Size 2.5MB
- Sample260807-yfrcrasdpc
- SHA256 03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8
- MD5 7f57207f221db2b08e27d64bc9121b28
- SHA1 3bfc4b12a533ee1ce62e5d348027d4ac90ab49db
- SHA512 7cc44ff1c3210db2478f4e37fef23669f0425b1b1672fc5f53956890daccb84b32fa25c8da9f7ce0cd1deb9e697e46cdae0762a0af818f98b93544b8e39f8a25
- SSDEEP 24576:zv5MZtiOMKNOJMv9EC8oJ8VxHuDBjk38WuBcAbwoA/BkjSHXP36RMG:zxMZtiOMK9EC8oa6CSA/Bkj0
- TLSH T176C5291333E84927F2AE677F9071093D53B9AA3F9A77C74E7814B89E84957028907723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Optimizer-16.7.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Optimizer-16.7.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Optimizer-16.7.exe
- Size 2.5MB
- SHA256 03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8
- MD5 7f57207f221db2b08e27d64bc9121b28
- SHA1 3bfc4b12a533ee1ce62e5d348027d4ac90ab49db
- SHA512 7cc44ff1c3210db2478f4e37fef23669f0425b1b1672fc5f53956890daccb84b32fa25c8da9f7ce0cd1deb9e697e46cdae0762a0af818f98b93544b8e39f8a25
- SSDEEP 24576:zv5MZtiOMKNOJMv9EC8oJ8VxHuDBjk38WuBcAbwoA/BkjSHXP36RMG:zxMZtiOMK9EC8oa6CSA/Bkj0
- TLSH T176C5291333E84927F2AE677F9071093D53B9AA3F9A77C74E7814B89E84957028907723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of file extensions in Explorer
-
Disables service(s)
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Windows Command Shell
1System Services
1Service Execution
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1