General
- Target 20260824 2.img
- Size 2.2MB
- Sample260824-akdepabf65
- SHA256 810e53107d0c6ced27f5f957d30981f5640c62b930bf4e30c9028b73b06c5cca
Malware Config
Targets
-
- Target 20260824.EXE
- Size 911KB
- SHA256 5d8d20ab8008d5e8cd6ff7b44273fc4a13d30e97d1c7b295aa0786da7ac1f9e3
Score8/10Drops file in Drivers directory
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MSOCF.dll
- Size 123KB
- SHA256 ad755d2dfeaa23b80d561656848d12d8e66edd99b1169d63a936fe7b01da57ab
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Drops file in Drivers directory
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
Executes dropped EXE
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target msvcp100.dll
- Size 411KB
- SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
Score3/10 -
- Target msvcr100.dll
- Size 755KB
- SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1