General
- Target SpectraEmu.exe
- Size 2.0MB
- Sample260813-app92swvgz
- SHA256 f8e409319baa062bbba8bb4114889d7e3dfc5774780aefc57a46f19ff407c18b
- MD5 09d7f980ab256ee6f8d1a54109ff4749
- SHA1 6a6cf9e5d630346bbfef72fb6b4356bfe33ff589
- SHA512 b7a5154f962703de87f9de3e4a3f1742c4f00cb9ccd621142d3d9a343c4f8551dddd0e0ddbe2f18ab48903f8631252517aadad67b0d0169e83d8d187730ba743
- SSDEEP 24576:J2PlcPsHsG4YRzktmJu6y72/WQ8ycZ4EM4w8zzoSsCyuiseEwCsDFDYBIP:oRmmJuZ72eQ5cZ4Eu8zXvwbEDQDYBIP
- TLSH T1BDA57D02FF81C877C0260731D89747F967B5FE502F65A69B32943F183E37B909A28666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SpectraEmu.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
SpectraEmu.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target SpectraEmu.exe
- Size 2.0MB
- SHA256 f8e409319baa062bbba8bb4114889d7e3dfc5774780aefc57a46f19ff407c18b
- MD5 09d7f980ab256ee6f8d1a54109ff4749
- SHA1 6a6cf9e5d630346bbfef72fb6b4356bfe33ff589
- SHA512 b7a5154f962703de87f9de3e4a3f1742c4f00cb9ccd621142d3d9a343c4f8551dddd0e0ddbe2f18ab48903f8631252517aadad67b0d0169e83d8d187730ba743
- SSDEEP 24576:J2PlcPsHsG4YRzktmJu6y72/WQ8ycZ4EM4w8zzoSsCyuiseEwCsDFDYBIP:oRmmJuZ72eQ5cZ4Eu8zXvwbEDQDYBIP
- TLSH T1BDA57D02FF81C877C0260731D89747F967B5FE502F65A69B32943F183E37B909A28666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1