General
- Target cert.rar
- Size 1.2MB
- Sample260815-tsxcbazcpf
- SHA256 9c329bad5830ba37b2f54412f0c3d723e4e8793080f6ec1deb11ae2a88385a36
- MD5 457c6cf8f53d86f0edd594a8ff462fd9
- SHA1 1fad965cd6666b22ec1d934b20fab5d9f3d53e09
- SHA512 71653a241abd8a6acb74bb4e2590afa8f8d8cb60729a1e96729d4e2099a86e91b8641ec60f3c03052b9c3b39097442c24b19f8be4dc78fd9131e65884f578f1f
- SSDEEP 24576:mY81mOnKWEBwv3eEwKc51dzFtnmKB+YbK+rXE9b91xjfZ:mY81mTWEY3ZwKc3dfnB+YbNXElLxjfZ
- TLSH T1C1453342CDC43DA70A57EAE7D0805F7EB4799A1532C888F1CC77C84A6AD6FAA6402527
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
cert.rar
Resource
win11ltsc2024-20260709-en
19 signatures
900 seconds
Malware Config
Targets
-
- Target cert.rar
- Size 1.2MB
- SHA256 9c329bad5830ba37b2f54412f0c3d723e4e8793080f6ec1deb11ae2a88385a36
- MD5 457c6cf8f53d86f0edd594a8ff462fd9
- SHA1 1fad965cd6666b22ec1d934b20fab5d9f3d53e09
- SHA512 71653a241abd8a6acb74bb4e2590afa8f8d8cb60729a1e96729d4e2099a86e91b8641ec60f3c03052b9c3b39097442c24b19f8be4dc78fd9131e65884f578f1f
- SSDEEP 24576:mY81mOnKWEBwv3eEwKc51dzFtnmKB+YbK+rXE9b91xjfZ:mY81mTWEY3ZwKc3dfnB+YbNXElLxjfZ
- TLSH T1C1453342CDC43DA70A57EAE7D0805F7EB4799A1532C888F1CC77C84A6AD6FAA6402527
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2