General
- Target Blink.exe
- Size 22.3MB
- Sample260815-m93gbsfd42
- SHA256 c2536acb7b9a429d367deeb54785346e5f7be6f07e03b3081be11623d27b5f31
- MD5 0ab4f5c7ea905bbde546a1e2852b22cd
- SHA1 e2dad3303a6047af327e7c0ed7929bbd424877eb
- SHA512 2d693b96af8b9abe4574f494033725d44ff2130a5c865f0e935453aa15e87583bfb159b6b9a25dfc93365dfba9dcff40e7d5dbe71d5a95e685b09eeb5cec6cdf
- SSDEEP 393216:3gSg+SveX1awou7prc/gaOuIsj2fbjujLRZuDNefxWv/itIaYMwi/BtvuyP1xVtn:3gSg7GkwouVc/LPIiAQRZupU0vKi1Mnh
- TLSH T142373383F5B6C967D625C9B6011299FFBB04F411270308F317EFA2816F1AED9983AD52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Blink.exe
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
Blink.exe
Resource
win11ltsc2024-20260709-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target Blink.exe
- Size 22.3MB
- SHA256 c2536acb7b9a429d367deeb54785346e5f7be6f07e03b3081be11623d27b5f31
- MD5 0ab4f5c7ea905bbde546a1e2852b22cd
- SHA1 e2dad3303a6047af327e7c0ed7929bbd424877eb
- SHA512 2d693b96af8b9abe4574f494033725d44ff2130a5c865f0e935453aa15e87583bfb159b6b9a25dfc93365dfba9dcff40e7d5dbe71d5a95e685b09eeb5cec6cdf
- SSDEEP 393216:3gSg+SveX1awou7prc/gaOuIsj2fbjujLRZuDNefxWv/itIaYMwi/BtvuyP1xVtn:3gSg7GkwouVc/LPIiAQRZupU0vKi1Mnh
- TLSH T142373383F5B6C967D625C9B6011299FFBB04F411270308F317EFA2816F1AED9983AD52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1