General
- Target SearchIndexer.exe
- Size 23.3MB
- Sample260818-sztpbsaa44
- SHA256 8048eb3bab0d10c6039894bf23c29672c909d0f7c3eae3bccbf96a97942cb03e
- MD5 90314f6a58b8505ddc645d122b59f532
- SHA1 4cd8517f0b9e578641e7cf1d62dbe646c5acc43d
- SHA512 326c0a6ae23bfa304dcf5163449b2bb217296ffcf895003c6415a54ea50939d594173e61401ef67d98e265e9719d6fca1ddcffba2a30af5d439794c61482febb
- SSDEEP 393216:73rZF4vRTy/9OIkDesQEUA14iLlyt+aW3hwF5rDbFh1+1f0p78yn+O8MUf:3ZF4Zu/9OIkDe1A14UygaWhwFB/14Mif
- TLSH T15137339023E80695D2FE8B79C17008D1CF71B72A5A4AEB4F3C8C78ED1B62781AD45767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SearchIndexer.exe
Resource
win11ltsc2024-20260709-uk
8 signatures
600 seconds
Malware Config
Targets
-
- Target SearchIndexer.exe
- Size 23.3MB
- SHA256 8048eb3bab0d10c6039894bf23c29672c909d0f7c3eae3bccbf96a97942cb03e
- MD5 90314f6a58b8505ddc645d122b59f532
- SHA1 4cd8517f0b9e578641e7cf1d62dbe646c5acc43d
- SHA512 326c0a6ae23bfa304dcf5163449b2bb217296ffcf895003c6415a54ea50939d594173e61401ef67d98e265e9719d6fca1ddcffba2a30af5d439794c61482febb
- SSDEEP 393216:73rZF4vRTy/9OIkDesQEUA14iLlyt+aW3hwF5rDbFh1+1f0p78yn+O8MUf:3ZF4Zu/9OIkDe1A14UygaWhwFB/14Mif
- TLSH T15137339023E80695D2FE8B79C17008D1CF71B72A5A4AEB4F3C8C78ED1B62781AD45767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1