General
- Target Ultra-Screen-Lab-Setup-x64-v0.2.2.exe
- Size 9.3MB
- Sample260814-2v7j3atbpb
- SHA256 1cc055394d49daf4692a245a10c347f8cf4b92122e4acd10d31e5b0e9e5f88af
- MD5 5e7c625f334f4f884447f1820da6530f
- SHA1 2df382d80c84284e51ea6c5e00ba4baddc628152
- SHA512 4f47dbdf587482fffba1aff6ce69323b90a5fd64365850297ec9517e80456cf069c51589d88a42946f89b329fa0b7c0aa74db172ee9568abcce65beb2488aff8
- SSDEEP 196608:UKlep7odoNUsbBmQQmP2xhXhpx19DKxHYo3x6dOg4aEwot:UKlep7UoWQwc2xFhpd2xHJh6dOgzEwot
- TLSH T104A6233FB28B713EE02E0A3679B6A214593BB62165578C1697F4C84CCF250B15E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Ultra-Screen-Lab-Setup-x64-v0.2.2.exe
Resource
win11ltsc2024-20260709-en
28 signatures
900 seconds
Malware Config
Targets
-
- Target Ultra-Screen-Lab-Setup-x64-v0.2.2.exe
- Size 9.3MB
- SHA256 1cc055394d49daf4692a245a10c347f8cf4b92122e4acd10d31e5b0e9e5f88af
- MD5 5e7c625f334f4f884447f1820da6530f
- SHA1 2df382d80c84284e51ea6c5e00ba4baddc628152
- SHA512 4f47dbdf587482fffba1aff6ce69323b90a5fd64365850297ec9517e80456cf069c51589d88a42946f89b329fa0b7c0aa74db172ee9568abcce65beb2488aff8
- SSDEEP 196608:UKlep7odoNUsbBmQQmP2xhXhpx19DKxHYo3x6dOg4aEwot:UKlep7UoWQwc2xFhpd2xHJh6dOgzEwot
- TLSH T104A6233FB28B713EE02E0A3679B6A214593BB62165578C1697F4C84CCF250B15E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1