General
- Target b0c55ee799ad1f9139dc34049f506dd31cbad5085a245ff1d773f91b62aed604
- Size 140KB
- Sample260819-j422tsdh99
- SHA256 b0c55ee799ad1f9139dc34049f506dd31cbad5085a245ff1d773f91b62aed604
- MD5 84491684d0f93bba3e1311e30e3feb58
- SHA1 a507a77ec6d589b122aaf325fbdec7c628032bfb
- SHA512 be17097e8a9fc75e91f389acf4b7473dda2abbc95febeb5f69f4a4d0216432b3bb3f7289313991c1d73dbb2a2885c1deac486869d057a68fc2292f0d7416478a
- SSDEEP 1536:R4Jf83W8W60IL26ApmJSRFMmqles2Dlb6Qow0Bw1+XyMI11J1WCIUgkw5cgj7apx:SJCD54mJSHM7Y9l+QoLBgi5IDJ1dQuNR
- TLSH T108E3AEC27B6E8596D8D615394B1B43221FE2BCD50B137606F681BBABE473D0C48F9983
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b0c55ee799ad1f9139dc34049f506dd31cbad5085a245ff1d773f91b62aed604.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b0c55ee799ad1f9139dc34049f506dd31cbad5085a245ff1d773f91b62aed604.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b0c55ee799ad1f9139dc34049f506dd31cbad5085a245ff1d773f91b62aed604
- Size 140KB
- SHA256 b0c55ee799ad1f9139dc34049f506dd31cbad5085a245ff1d773f91b62aed604
- MD5 84491684d0f93bba3e1311e30e3feb58
- SHA1 a507a77ec6d589b122aaf325fbdec7c628032bfb
- SHA512 be17097e8a9fc75e91f389acf4b7473dda2abbc95febeb5f69f4a4d0216432b3bb3f7289313991c1d73dbb2a2885c1deac486869d057a68fc2292f0d7416478a
- SSDEEP 1536:R4Jf83W8W60IL26ApmJSRFMmqles2Dlb6Qow0Bw1+XyMI11J1WCIUgkw5cgj7apx:SJCD54mJSHM7Y9l+QoLBgi5IDJ1dQuNR
- TLSH T108E3AEC27B6E8596D8D615394B1B43221FE2BCD50B137606F681BBABE473D0C48F9983
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory