General
- Target test.exe
- Size 89.5MB
- Sample260821-sxcyssca55
- SHA256 d0a3599b4fc7519973f023e63f732d0364c4f3316ba50af4bc6829dc1dd5d46c
- MD5 490d394cd6b5321e3275e6270b6f6615
- SHA1 1f815be20a119cc835e7678a32032ab130834d49
- SHA512 f1f7220e31ca1b593092ade4121f469067e4a8fa57c8f161cf2a37bbcb9220592410c31be5cd451662ae4b8ed04e4bde4aac6fea726092a120e8f77b41ca36c5
- SSDEEP 1572864:DSfVakvkjrZ9sOIXEXcGUbP0IgBNlnNBSF4cokxwOEAe1IpXZlrTx/0vitQ4Wkns:iJvkjnsJXEsGUzWBDNBSF4cjwOEF1+lh
- TLSH T10C283358FE8B54F5EE235535865BF23F8720AA05C015EEB6EF0D3F59F933222241A216
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
test.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
test.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target test.exe
- Size 89.5MB
- SHA256 d0a3599b4fc7519973f023e63f732d0364c4f3316ba50af4bc6829dc1dd5d46c
- MD5 490d394cd6b5321e3275e6270b6f6615
- SHA1 1f815be20a119cc835e7678a32032ab130834d49
- SHA512 f1f7220e31ca1b593092ade4121f469067e4a8fa57c8f161cf2a37bbcb9220592410c31be5cd451662ae4b8ed04e4bde4aac6fea726092a120e8f77b41ca36c5
- SSDEEP 1572864:DSfVakvkjrZ9sOIXEXcGUbP0IgBNlnNBSF4cokxwOEAe1IpXZlrTx/0vitQ4Wkns:iJvkjnsJXEsGUzWBDNBSF4cjwOEF1+lh
- TLSH T10C283358FE8B54F5EE235535865BF23F8720AA05C015EEB6EF0D3F59F933222241A216
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Image File Execution Options Injection
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2Image File Execution Options Injection
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2Image File Execution Options Injection
1Netsh Helper DLL
1