General
- Target monika-bootstrap.exe
- Size 11.3MB
- Sample260812-vqm7as1fla
- SHA256 1f69470064a69e69d3f61f39cc29eb64a1675575f1926777acecf0d26fca7b1a
- MD5 eb72698040c99f1e78091531f208dfef
- SHA1 a8d7f33d615a1cc8c53389596986b59d765b54e8
- SHA512 e9e81a3ed35bc0cb4fe4510438cd16b65537302965b17686f38fcb8b4068036a53622c0165a96cf28b1b6ce1371ccfb711b413e8430c19d4ae0acdc1bf26f196
- SSDEEP 98304:5/cEjULpmpmDWy2LSzOqcj9XTCDgbD8uzIJowYx1SbrgrElfSB86dwj0yETmTQp:ApmM2LS6eg
- TLSH T1A8C6F621BA5B99ACD15BC4B483474A72097170CA0B35B9FF449492382FBEBF52F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
monika-bootstrap.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
monika-bootstrap.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target monika-bootstrap.exe
- Size 11.3MB
- SHA256 1f69470064a69e69d3f61f39cc29eb64a1675575f1926777acecf0d26fca7b1a
- MD5 eb72698040c99f1e78091531f208dfef
- SHA1 a8d7f33d615a1cc8c53389596986b59d765b54e8
- SHA512 e9e81a3ed35bc0cb4fe4510438cd16b65537302965b17686f38fcb8b4068036a53622c0165a96cf28b1b6ce1371ccfb711b413e8430c19d4ae0acdc1bf26f196
- SSDEEP 98304:5/cEjULpmpmDWy2LSzOqcj9XTCDgbD8uzIJowYx1SbrgrElfSB86dwj0yETmTQp:ApmM2LS6eg
- TLSH T1A8C6F621BA5B99ACD15BC4B483474A72097170CA0B35B9FF449492382FBEBF52F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.