User tags
Assigned on submission by the user, not by sandbox detections.
General
- Target 07b37fb2b62aa128c28827e73ab43ad4690a30fc26eda2667af43774ce1f9c60.zip
- Size 5.2MB
- Sample260818-mk9jca1zb1
- SHA256 4c90b9b20b7270556d17ca469108908a5c2985556dcd7f2d44fc96caef3711af
- MD5 27e9d69ac68eb28d8eaaa9a256feb967
- SHA1 6d6a26a21d21bcf368dc7059fe778db92d1835a7
- SHA512 bd0ca99024dcdbc40b6f802c66aaae7adfa5bbd0f847aa10931ec7b1b3c99341cfe99db0a5fd3f1407f0fc5cd9497a2d5bc720d942bc367284d7aa81f8f715a0
- SSDEEP 98304:2BdjPNZN32ZIt5aXilKmt8sjOvGPKkoLjjnp5HDyKbR4N21wuDxhLTLW:2BdjPd3htXvt8sj8tLjLyKbdRhLG
- TLSH T1A646334A168DB9317840697970AD24D5CF6A737BC7680ABFAD7B64C3FDD280F994C801
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
07b37fb2b62aa128c28827e73ab43ad4690a30fc26eda2667af43774ce1f9c60.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
07b37fb2b62aa128c28827e73ab43ad4690a30fc26eda2667af43774ce1f9c60.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 07b37fb2b62aa128c28827e73ab43ad4690a30fc26eda2667af43774ce1f9c60.exe
- Size 5.4MB
- SHA256 07b37fb2b62aa128c28827e73ab43ad4690a30fc26eda2667af43774ce1f9c60
- MD5 e7114d31b9dce6c0cb12b98b2b0495df
- SHA1 d0f8058ebc8f3fc0a939aeaf53f8c7f73772037c
- SHA512 7a93aa510a47057e6498906207c71d83c82e589d05e11948ecfe11829e8d387dbf0f332b9aa4bfd07a9865dce074eee31495395fea71140e9903c6bec3e7909c
- SSDEEP 98304:8JgtojfICDtPfeE/jowqK5LN1KQ0oTh2M9QrABlolllfHnMs2i6LRp:nYICteErownP0oTcMsABqliTtLv
- TLSH T12D463318B3A808E6F6B3D03981665621E473B4254BF0D1CB43AC97662F677D0AE7FB50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1