General
- Target 7d60f6ee0a49b5589a510bc85449a8adfeab409165af52c902e2701eaeb9f425
- Size 1.1MB
- Sample260824-kcs6aavcjg
- SHA256 7d60f6ee0a49b5589a510bc85449a8adfeab409165af52c902e2701eaeb9f425
- MD5 fb799902277692f84447336501098f77
- SHA1 4a94e8098e913a4af1139d125083b5b7d2e0d051
- SHA512 fe876e324ce37fbc7eab2d3fd4bc416d75c99e038af88e185e94cd96841b9350316fd8742249a58e88bffa3f14e31f66a6abdfb2d480d0bf9cbc070ffe1730aa
- SSDEEP 24576:8HT68Osb05coSKRSdGbohOUlbOIcPnGrPe8d91dHu7:8HTZ05chK1kh7A5GDXdy
- TLSH T15B45D002F69280F5C624253114EA6B3AEF35DA560E25CF879364DEAD1C36702ED3727E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7d60f6ee0a49b5589a510bc85449a8adfeab409165af52c902e2701eaeb9f425.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
7d60f6ee0a49b5589a510bc85449a8adfeab409165af52c902e2701eaeb9f425.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 7d60f6ee0a49b5589a510bc85449a8adfeab409165af52c902e2701eaeb9f425
- Size 1.1MB
- SHA256 7d60f6ee0a49b5589a510bc85449a8adfeab409165af52c902e2701eaeb9f425
- MD5 fb799902277692f84447336501098f77
- SHA1 4a94e8098e913a4af1139d125083b5b7d2e0d051
- SHA512 fe876e324ce37fbc7eab2d3fd4bc416d75c99e038af88e185e94cd96841b9350316fd8742249a58e88bffa3f14e31f66a6abdfb2d480d0bf9cbc070ffe1730aa
- SSDEEP 24576:8HT68Osb05coSKRSdGbohOUlbOIcPnGrPe8d91dHu7:8HTZ05chK1kh7A5GDXdy
- TLSH T15B45D002F69280F5C624253114EA6B3AEF35DA560E25CF879364DEAD1C36702ED3727E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Stops running service(s)
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2