General
- Target DelayOptimizer.exe
- Size 16.1MB
- Sample260814-c77cdsszes
- SHA256 d98e2dd77cb4947fb175a3314a6021431bc9d4bad1e6c36d42ee03f837b46ebb
- MD5 4f7cc8775beb2957cf9b8fd12de96a1f
- SHA1 6e68dd3b0c242a1019cc9330b343e7fc5ada76c6
- SHA512 3b7ad1bff3df52022e55aa29d1d65aae6ecff2400211c23a2644e3babc0e5fb2973cbf48a6460b594a1de3b96188541e11cda794c15b3db136e70d11c2d98aba
- SSDEEP 393216:QWSOHiJiuyW8ZPuCAXbWAq4tpB9PXBm27Yd3N:QWSOFW8MCMtpB9PXP7Md
- TLSH T1A40733687BA100E6FCD9937968E1D463A2D47DAA0BA5CA9353F10A500D736C6FFB1313
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DelayOptimizer.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
delaytweaks.pyc
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target DelayOptimizer.exe
- Size 16.1MB
- SHA256 d98e2dd77cb4947fb175a3314a6021431bc9d4bad1e6c36d42ee03f837b46ebb
- MD5 4f7cc8775beb2957cf9b8fd12de96a1f
- SHA1 6e68dd3b0c242a1019cc9330b343e7fc5ada76c6
- SHA512 3b7ad1bff3df52022e55aa29d1d65aae6ecff2400211c23a2644e3babc0e5fb2973cbf48a6460b594a1de3b96188541e11cda794c15b3db136e70d11c2d98aba
- SSDEEP 393216:QWSOHiJiuyW8ZPuCAXbWAq4tpB9PXBm27Yd3N:QWSOFW8MCMtpB9PXP7Md
- TLSH T1A40733687BA100E6FCD9937968E1D463A2D47DAA0BA5CA9353F10A500D736C6FFB1313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
- Target delaytweaks.pyc
- Size 104KB
- SHA256 5bf85273c0c6c91b7ebd75f75b05ca7e47a0320a04ee73e2f8d9286e349a393d
- MD5 ba3ac7788eed531404c0df5095131f39
- SHA1 aa659b108e06e7023d28c158bb6764c4987fc221
- SHA512 bdd382f8e1ed26a4a8151eeef7eee50bca4108ecaf4868e5d53ebfe82a5a3f1aa1789a052788bf2351e9a363ae322f05c0f8b4a55d6671914a2d34e92c907919
- SSDEEP 1536:gtc4NKaYqq3L7Cr+cOBXotYsNEPc/l2PjZuKBCmIAPGJbJQ23palq4miUWbKGpOf:gBy+WPkQPPcZ33N6d2
- TLSH T1D5A3B556A8309513FFA4B139C0EA8650E33939C6B325C7B3725E587A7CC61ADCD66B0C
- MD5 SHA1 SHA512 SSDEEP TLSH
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
4