General
- Target install_n3w011.exe
- Size 40.8MB
- Sample260808-td83kaec56
- SHA256 a82ddf1015b9f676b2aa720f33e351330418e7739da9e90ddb6ebed1304dcd40
- MD5 ebd0b8e0f53ea8a997823dab5224f2e9
- SHA1 c11961ace6157d86482167527927cbe937a8a38a
- SHA512 38bd712e3d099ce3413d315ea04bff13e5cc71f0b43f213f0c8e5446af7a7957eb4b43a682356963a0edfe42196c6f9ea6dfff12ef819ca502067c19b2aaca57
- SSDEEP 196608:cSnmlCYTn2d/7TWmObFtDhb6Z/LzEnSQ5Ps6EgX:jabW4LDL
- TLSH T100972E06B701CD9AF4255238888B0FA1B775DCB18A6A932723B8763D3FFE35C5E91944
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
install_n3w011.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
install_n3w011.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target install_n3w011.exe
- Size 40.8MB
- SHA256 a82ddf1015b9f676b2aa720f33e351330418e7739da9e90ddb6ebed1304dcd40
- MD5 ebd0b8e0f53ea8a997823dab5224f2e9
- SHA1 c11961ace6157d86482167527927cbe937a8a38a
- SHA512 38bd712e3d099ce3413d315ea04bff13e5cc71f0b43f213f0c8e5446af7a7957eb4b43a682356963a0edfe42196c6f9ea6dfff12ef819ca502067c19b2aaca57
- SSDEEP 196608:cSnmlCYTn2d/7TWmObFtDhb6Z/LzEnSQ5Ps6EgX:jabW4LDL
- TLSH T100972E06B701CD9AF4255238888B0FA1B775DCB18A6A932723B8763D3FFE35C5E91944
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1