General
- Target MuMu_6.0.2_TLRGQFC.exe
- Size 5.8MB
- Sample260815-ba1ynscm9v
- SHA256 2314b74a445694ce399e8e09c3e0d0eaba54341e252fd89bc76e03bc226fe91b
- MD5 2097c8b2e93e1f503aa87e2c11bbe6af
- SHA1 1b8d4b91e654c5e041830116128f922ed11653a8
- SHA512 ae033e1306616a296738e43b8dd719bb2e39b2b1b433a3070743b40b568ffc2f7050e4f195a6e299ae4857ebaa5b791a66c21abcbc55f4f4418d2621b49943cf
- SSDEEP 98304:eer6uFFkOuPR3cja1XAY8Qm/gPeX7ZmKdlhqap1ZcWDtIELv9VCOxeI+S0bIwrSB:Hr6uFFkOuP2aF9787ZHlLbjXLWjI+SvP
- TLSH T1B5562382C20173B6D41D5DFC512D87FABA537CDE6C482D46028EF2ABB0AD5602F859DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MuMu_6.0.2_TLRGQFC.exe
Resource
win11-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target MuMu_6.0.2_TLRGQFC.exe
- Size 5.8MB
- SHA256 2314b74a445694ce399e8e09c3e0d0eaba54341e252fd89bc76e03bc226fe91b
- MD5 2097c8b2e93e1f503aa87e2c11bbe6af
- SHA1 1b8d4b91e654c5e041830116128f922ed11653a8
- SHA512 ae033e1306616a296738e43b8dd719bb2e39b2b1b433a3070743b40b568ffc2f7050e4f195a6e299ae4857ebaa5b791a66c21abcbc55f4f4418d2621b49943cf
- SSDEEP 98304:eer6uFFkOuPR3cja1XAY8Qm/gPeX7ZmKdlhqap1ZcWDtIELv9VCOxeI+S0bIwrSB:Hr6uFFkOuP2aF9787ZHlLbjXLWjI+SvP
- TLSH T1B5562382C20173B6D41D5DFC512D87FABA537CDE6C482D46028EF2ABB0AD5602F859DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1