General
- Target HelpWire bsmall_com.exe
- Size 14.2MB
- Sample260815-dnlr1sdr6w
- SHA256 7ba38c975e80d5a768382e8dd1c5312a2335d550a78d732f54ed9800cabdeb0a
- MD5 d8e002385c6aaf14fe7d49d5ee130354
- SHA1 b47e29e1f649759103143ec0cfbd1b1da11d43ef
- SHA512 b283242baaf2b60a5df284065e861d69510d30fb2d3b6001510d84ce233b09ee791a74ecd740b7897d7163755bd377744777ac8455966b3aea2395417bfaff54
- SSDEEP 196608:HzGzWmduKhKSuy4TQWl8AhYAXmc2hRLiy82hujFdjSy3HFLOyomFHKnPq:HzGz41xHTQi8App+8CujFBSyXFD
- TLSH T1CBE6BF11BA414861E5820171CC6AE7B6573D3D2817F240F3F2DCBAEDEB31AD23A35A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
HelpWire bsmall_com.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
HelpWire bsmall_com.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target HelpWire bsmall_com.exe
- Size 14.2MB
- SHA256 7ba38c975e80d5a768382e8dd1c5312a2335d550a78d732f54ed9800cabdeb0a
- MD5 d8e002385c6aaf14fe7d49d5ee130354
- SHA1 b47e29e1f649759103143ec0cfbd1b1da11d43ef
- SHA512 b283242baaf2b60a5df284065e861d69510d30fb2d3b6001510d84ce233b09ee791a74ecd740b7897d7163755bd377744777ac8455966b3aea2395417bfaff54
- SSDEEP 196608:HzGzWmduKhKSuy4TQWl8AhYAXmc2hRLiy82hujFdjSy3HFLOyomFHKnPq:HzGz41xHTQi8App+8CujFBSyXFD
- TLSH T1CBE6BF11BA414861E5820171CC6AE7B6573D3D2817F240F3F2DCBAEDEB31AD23A35A56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1