General
- Target d457a2fe8626b036d5f293405b03a3c93789ab9167d0044895569362519fd428
- Size 1.9MB
- Sample260820-eexzcssshs
- SHA256 d457a2fe8626b036d5f293405b03a3c93789ab9167d0044895569362519fd428
- MD5 84961599811c77d9da0eb0462c590d62
- SHA1 78c6d3ac9f2acfc97a0d61c91601162b13278f89
- SHA512 d0129e95c5954587399bb7b8d64b3c22be84a6934d0b1f559d59924c280869923ec795726b14c0f0acb860fd768723254a9b802f3c8899011982f3eb6664ab72
- SSDEEP 49152:Ab2f68Q3Zhhck6QuuODW7YmfZhvzyPGz3+yhLmVsZd/d:dPQltuu8mfZhvWg3bhLmVsp
- TLSH T10E953341207A8C38F81388FDDF27AAA075609DA55C46586723B7FF4B9DBFAE907C4412
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
d457a2fe8626b036d5f293405b03a3c93789ab9167d0044895569362519fd428.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
d457a2fe8626b036d5f293405b03a3c93789ab9167d0044895569362519fd428.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d457a2fe8626b036d5f293405b03a3c93789ab9167d0044895569362519fd428
- Size 1.9MB
- SHA256 d457a2fe8626b036d5f293405b03a3c93789ab9167d0044895569362519fd428
- MD5 84961599811c77d9da0eb0462c590d62
- SHA1 78c6d3ac9f2acfc97a0d61c91601162b13278f89
- SHA512 d0129e95c5954587399bb7b8d64b3c22be84a6934d0b1f559d59924c280869923ec795726b14c0f0acb860fd768723254a9b802f3c8899011982f3eb6664ab72
- SSDEEP 49152:Ab2f68Q3Zhhck6QuuODW7YmfZhvzyPGz3+yhLmVsZd/d:dPQltuu8mfZhvWg3bhLmVsp
- TLSH T10E953341207A8C38F81388FDDF27AAA075609DA55C46586723B7FF4B9DBFAE907C4412
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1