General
- Target mytweakv3.5_.exe
- Size 19.6MB
- Sample260814-c171caeg36
- SHA256 8bdc849e66b7dbff8361912aba2c6e6884847a24ead256e643d08daf15f4025d
- MD5 80d2ae53abc1cdbcef1ed1713fb7409b
- SHA1 2100778d48a6d53a3093b49cd2878438231f48a9
- SHA512 f167198f8fdae01686ce1f47e5c4488fcaf2af083e82d41b16eddd1f89393af9f9959e7870bde5f2fbd65f6ef7f2c9c3da0de762a511fd7414907b2a710707c9
- SSDEEP 393216:OmLWkY+COSI2BnVQIDKyCocSXIY3W83rX9DfDYpfaMPHaC2Dvob:O+YHOSrnV7KyC0XIY3W8bX9bGf9PN20b
- TLSH T105273351BB102CDAD49992F614C89F102743697717AAB85BFBBA1E040F9B58BFF74302
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mytweakv3.5_.exe
Resource
win10v2004-20260513-en
27 signatures
150 seconds
Malware Config
Targets
-
- Target mytweakv3.5_.exe
- Size 19.6MB
- SHA256 8bdc849e66b7dbff8361912aba2c6e6884847a24ead256e643d08daf15f4025d
- MD5 80d2ae53abc1cdbcef1ed1713fb7409b
- SHA1 2100778d48a6d53a3093b49cd2878438231f48a9
- SHA512 f167198f8fdae01686ce1f47e5c4488fcaf2af083e82d41b16eddd1f89393af9f9959e7870bde5f2fbd65f6ef7f2c9c3da0de762a511fd7414907b2a710707c9
- SSDEEP 393216:OmLWkY+COSI2BnVQIDKyCocSXIY3W83rX9DfDYpfaMPHaC2Dvob:O+YHOSrnV7KyC0XIY3W8bX9bGf9PN20b
- TLSH T105273351BB102CDAD49992F614C89F102743697717AAB85BFBBA1E040F9B58BFF74302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Power Settings
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2