General
- Target ska2pwej.aeh.exe
- Size 5.0MB
- Sample260808-phhzqawfre
- SHA256 6613acb18cb8bf501fba619f04f8298e5e633cb220c450212bbc9dd2bef9538d
- MD5 929335d847f8265c0a8648dd6d593605
- SHA1 0ff9acf1293ed8b313628269791d09e6413fca56
- SHA512 7c9a4d1bec430503cc355dc76955d341e001b06196d4b508cc35d64feb2e8ba30e824e7c3a11c27135d7d99801f45f62a5b558563b4c78f89f5d156a929063fd
- SSDEEP 98304:rEzNRQ8SgI9jutylH+PjqHbUjHieB/12emQvYP:wNrPGC0ePjqHbUjHicQs2
- TLSH T1AF36123FB268653ED46B4B324573936099BBBB61A81B8C1F07F0490DCF664711F3AA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ska2pwej.aeh.exe
Resource
win11-20260513-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target ska2pwej.aeh.exe
- Size 5.0MB
- SHA256 6613acb18cb8bf501fba619f04f8298e5e633cb220c450212bbc9dd2bef9538d
- MD5 929335d847f8265c0a8648dd6d593605
- SHA1 0ff9acf1293ed8b313628269791d09e6413fca56
- SHA512 7c9a4d1bec430503cc355dc76955d341e001b06196d4b508cc35d64feb2e8ba30e824e7c3a11c27135d7d99801f45f62a5b558563b4c78f89f5d156a929063fd
- SSDEEP 98304:rEzNRQ8SgI9jutylH+PjqHbUjHieB/12emQvYP:wNrPGC0ePjqHbUjHicQs2
- TLSH T1AF36123FB268653ED46B4B324573936099BBBB61A81B8C1F07F0490DCF664711F3AA16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1