General
- Target J.exe
- Size 6.0MB
- Sample260816-1r1rnsysb1
- SHA256 6fad1fa7397970c71464183ad8aab7d158d799eba54c0fdd8573a21b6da37c1e
- MD5 892c00b3a2d658ec36a3f43ffb98f909
- SHA1 8e454129c4dae69c5467e8ab288e765909c24104
- SHA512 6e65bfda7b6ad94a1211f7452453023adbaf359bfaf44996e143b5024b3b8ee823fe77a4b780340b3e1c3afd9f128eb40ba070b497edd7406713712b17af4bd7
- SSDEEP 49152:RJKrkCj+gbTInMfPgFyhOA/rXiwDE7jfaFUO1I1soQOzcSmMH122pvkwKeK9Kp3S:RAZtTdoqFUCI1EdO3xE
- TLSH T15E564A0BE89515E9C0A9E23089629253BF717C495F3163D32BA0F37C6F76BD06AB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
J.exe
Resource
win11-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
J.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target J.exe
- Size 6.0MB
- SHA256 6fad1fa7397970c71464183ad8aab7d158d799eba54c0fdd8573a21b6da37c1e
- MD5 892c00b3a2d658ec36a3f43ffb98f909
- SHA1 8e454129c4dae69c5467e8ab288e765909c24104
- SHA512 6e65bfda7b6ad94a1211f7452453023adbaf359bfaf44996e143b5024b3b8ee823fe77a4b780340b3e1c3afd9f128eb40ba070b497edd7406713712b17af4bd7
- SSDEEP 49152:RJKrkCj+gbTInMfPgFyhOA/rXiwDE7jfaFUO1I1soQOzcSmMH122pvkwKeK9Kp3S:RAZtTdoqFUCI1EdO3xE
- TLSH T15E564A0BE89515E9C0A9E23089629253BF717C495F3163D32BA0F37C6F76BD06AB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
3Install Root Certificate
2SIP and Trust Provider Hijacking
1