General
- Target HamasClient.exe
- Size 50.6MB
- Sample260821-2rh3asydqh
- SHA256 eceae6f623ffc2c46db77ae3070eb5f7d3f8761a8701b32bc603154b54ad45bf
- MD5 5debf629c21768e7fb89cccbc5579dfa
- SHA1 3fa7ff23a22714ccef4c0bfb75e05d9a36faabc5
- SHA512 59d06679c10de6f10ee783aef699dd94c8ad4a53639fa807aff2dff34ccaa82ab2aca81dcafa6349314f73e565f819a0fa0f6ec2f283bb7c936c8ae297c579fe
- SSDEEP 786432:XptcUFtO8ZNYAF6nm4d9JfD3+kaiaCePAXkff6yauJXnmzkLv1j3ekw5/i9cP4nG:tFtPqAQnH9OkDy9f6fYXr5e55/h2p+
- TLSH T180C71246E2F901E8D57BC178C6675617E7B13419173097DF66A48AA82F33BE0AE3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HamasClient.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target HamasClient.exe
- Size 50.6MB
- SHA256 eceae6f623ffc2c46db77ae3070eb5f7d3f8761a8701b32bc603154b54ad45bf
- MD5 5debf629c21768e7fb89cccbc5579dfa
- SHA1 3fa7ff23a22714ccef4c0bfb75e05d9a36faabc5
- SHA512 59d06679c10de6f10ee783aef699dd94c8ad4a53639fa807aff2dff34ccaa82ab2aca81dcafa6349314f73e565f819a0fa0f6ec2f283bb7c936c8ae297c579fe
- SSDEEP 786432:XptcUFtO8ZNYAF6nm4d9JfD3+kaiaCePAXkff6yauJXnmzkLv1j3ekw5/i9cP4nG:tFtPqAQnH9OkDy9f6fYXr5e55/h2p+
- TLSH T180C71246E2F901E8D57BC178C6675617E7B13419173097DF66A48AA82F33BE0AE3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1