General
- Target MultiLuckywareCleaner.exe
- Size 549KB
- Sample260819-mc3qtssane
- SHA256 c5d48fff10f0ead8ab155474e1d202fddcea1d95ba36eac1138fb72fb2d02258
- MD5 66d36f7c530fb47ccae61ca67bd710d5
- SHA1 bf7de08b59a70312d3e3782f59db686501811b1b
- SHA512 ad3d5347c5b75973ef89abaf7a2b6437eb72cfffd82162e6f5d795301e0028dc0bf6670a683d31058550b0c5c8ac3cb8b7bf3410dd30dbc40af317dfa5e6b0aa
- SSDEEP 12288:HI3rYqVRaHnWnq7pHwGIZHJgUY0iGYluiFJIIXEee:HwYqVcr712JgUY0NyFJ4
- TLSH T1F3C45C1967A403F9E1B7C279CE524902EB7278494770A6DF03A045A75F27BE05F3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MultiLuckywareCleaner.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target MultiLuckywareCleaner.exe
- Size 549KB
- SHA256 c5d48fff10f0ead8ab155474e1d202fddcea1d95ba36eac1138fb72fb2d02258
- MD5 66d36f7c530fb47ccae61ca67bd710d5
- SHA1 bf7de08b59a70312d3e3782f59db686501811b1b
- SHA512 ad3d5347c5b75973ef89abaf7a2b6437eb72cfffd82162e6f5d795301e0028dc0bf6670a683d31058550b0c5c8ac3cb8b7bf3410dd30dbc40af317dfa5e6b0aa
- SSDEEP 12288:HI3rYqVRaHnWnq7pHwGIZHJgUY0iGYluiFJIIXEee:HwYqVcr712JgUY0NyFJ4
- TLSH T1F3C45C1967A403F9E1B7C279CE524902EB7278494770A6DF03A045A75F27BE05F3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1