General
- Target 3cf2f05742ec341a5ff73d067402b66bb7e842cac0bbefa0b6c47036429bef59
- Size 50.6MB
- Sample260814-kt2trazshs
- SHA256 3cf2f05742ec341a5ff73d067402b66bb7e842cac0bbefa0b6c47036429bef59
- MD5 8459d2471fc751878498826168489601
- SHA1 1b2f1760f58b5057635394fb48653fb4b3e25f94
- SHA512 c116afc444f0791a4a064f6be56eab2be35763c029bd7058bbced1c98d0008e641d46f9b6f482438cd3d85124e19a1ca2adbc8527fe386242cc2b2cfee0b10b1
- SSDEEP 1572864:UVTg/44gYxzPIxeDlEcZeVMa8U6BhxmfdPYLswtC0u:UJmgYxzPI0xEMgvWxcdPYDS
- TLSH T1C1C7330685CE7EB5E0F352326B7386E142C8EF89B653930EE4C47EB5C979202B5517B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3cf2f05742ec341a5ff73d067402b66bb7e842cac0bbefa0b6c47036429bef59.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
3cf2f05742ec341a5ff73d067402b66bb7e842cac0bbefa0b6c47036429bef59.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 3cf2f05742ec341a5ff73d067402b66bb7e842cac0bbefa0b6c47036429bef59
- Size 50.6MB
- SHA256 3cf2f05742ec341a5ff73d067402b66bb7e842cac0bbefa0b6c47036429bef59
- MD5 8459d2471fc751878498826168489601
- SHA1 1b2f1760f58b5057635394fb48653fb4b3e25f94
- SHA512 c116afc444f0791a4a064f6be56eab2be35763c029bd7058bbced1c98d0008e641d46f9b6f482438cd3d85124e19a1ca2adbc8527fe386242cc2b2cfee0b10b1
- SSDEEP 1572864:UVTg/44gYxzPIxeDlEcZeVMa8U6BhxmfdPYLswtC0u:UJmgYxzPI0xEMgvWxcdPYDS
- TLSH T1C1C7330685CE7EB5E0F352326B7386E142C8EF89B653930EE4C47EB5C979202B5517B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)