General
- Target planetvpn.exe
- Size 121.6MB
- Sample260823-kclffaztdx
- SHA256 8cff9a2180169ac311e8d8e9aac1e717dcfe34efb7fe9ade8f15260d2feb558f
- MD5 ee02ec24dfcc5e1ee47c00cb0f816557
- SHA1 a26ccec8a4475806d80f12209f38728bfa479e6b
- SHA512 e98d4f82ea961c43714e889e578dacbbef788b9535ab77ab55a11468fed09d0d8cfc8ead3231e748074c08e7950db6a1baf595d6ec2595e90bee40d871419fe3
- SSDEEP 3145728:Suk5r/+rJpg21HgkYUxBsjdRXLmVE72HeAmv/ZYcykEx:Sx5DAJgkYmBsjdRXLD6+AYZtydx
- TLSH T1CC58336BA347713CE09D9A363936BA60587A9E113F120596BAD0B59CCB321311F3FE17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
planetvpn.exe
Resource
win10v2004-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
planetvpn.exe
Resource
win11ltsc2024-20260709-en
19 signatures
900 seconds
Malware Config
Targets
-
- Target planetvpn.exe
- Size 121.6MB
- SHA256 8cff9a2180169ac311e8d8e9aac1e717dcfe34efb7fe9ade8f15260d2feb558f
- MD5 ee02ec24dfcc5e1ee47c00cb0f816557
- SHA1 a26ccec8a4475806d80f12209f38728bfa479e6b
- SHA512 e98d4f82ea961c43714e889e578dacbbef788b9535ab77ab55a11468fed09d0d8cfc8ead3231e748074c08e7950db6a1baf595d6ec2595e90bee40d871419fe3
- SSDEEP 3145728:Suk5r/+rJpg21HgkYUxBsjdRXLmVE72HeAmv/ZYcykEx:Sx5DAJgkYmBsjdRXLD6+AYZtydx
- TLSH T1CC58336BA347713CE09D9A363936BA60587A9E113F120596BAD0B59CCB321311F3FE17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
4Software Discovery
1Security Software Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Time Discovery
1