General
- Target 06a55a5ab6468aea0bb2166bedff0b85b2305caf8dd7860e78783754c6762681
- Size 726KB
- Sample260825-s396gsbp4s
- SHA256 06a55a5ab6468aea0bb2166bedff0b85b2305caf8dd7860e78783754c6762681
- MD5 f193d26ca961e1972f7ae6a0885ec6e4
- SHA1 47ee4eeae5be7956593a3168b2775e0388491eff
- SHA512 10c6aa0c16d089fb3413a52a230b11a8306727840f20b72f3f8c3d66ec66ddb13030b9b1bb857524ba3ea0e4b12406f3733f4fbdd2c749e88c49f752834cf5ad
- SSDEEP 12288:Yi0+Y42yKsd+1Jp0hZGMfv5bnMrAA5Jt0knPHEf8ifCoR/f6pcuaLzqJ3N3:5VFKUi4TnMrAA5IknPk9hEzanqJ93
- TLSH T1D4F4CFA5E369742AC8130B754ED9A46412A32406439FBFFBB1192ADD472A7C833737DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
06a55a5ab6468aea0bb2166bedff0b85b2305caf8dd7860e78783754c6762681.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 06a55a5ab6468aea0bb2166bedff0b85b2305caf8dd7860e78783754c6762681
- Size 726KB
- SHA256 06a55a5ab6468aea0bb2166bedff0b85b2305caf8dd7860e78783754c6762681
- MD5 f193d26ca961e1972f7ae6a0885ec6e4
- SHA1 47ee4eeae5be7956593a3168b2775e0388491eff
- SHA512 10c6aa0c16d089fb3413a52a230b11a8306727840f20b72f3f8c3d66ec66ddb13030b9b1bb857524ba3ea0e4b12406f3733f4fbdd2c749e88c49f752834cf5ad
- SSDEEP 12288:Yi0+Y42yKsd+1Jp0hZGMfv5bnMrAA5Jt0knPHEf8ifCoR/f6pcuaLzqJ3N3:5VFKUi4TnMrAA5IknPk9hEzanqJ93
- TLSH T1D4F4CFA5E369742AC8130B754ED9A46412A32406439FBFFBB1192ADD472A7C833737DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1