General
- Target 0a7a6187399d084b3b92d21847032b6bd843519fe24fa920fefeda0eb3253a73
- Size 5.0MB
- Sample260826-ns6yvsda99
- SHA256 0a7a6187399d084b3b92d21847032b6bd843519fe24fa920fefeda0eb3253a73
- MD5 64cf85867b29629fe2dd49411fb7d181
- SHA1 99d1a86fc39ef499b2567a8198c292d0873c0c91
- SHA512 bd03172b56c65b6c55d2ff0b1b2e40cf2932e9993b2ff6771f3277d6d033bd210574c74a83ff25f8ef00ce70d0e54d1472b54c2d673391d9e9ad602f03298480
- SSDEEP 98304:HILJkKObAFtn/PdQEMhpxdgOsBhQMJ9gfah:UJkBbAFMhndgVJ9Y
- TLSH T1B436BF11FA8040B1E5B3413886BAAB7B897DBD30132485C7A3E41D7A4E716D27B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a7a6187399d084b3b92d21847032b6bd843519fe24fa920fefeda0eb3253a73.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a7a6187399d084b3b92d21847032b6bd843519fe24fa920fefeda0eb3253a73.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 0a7a6187399d084b3b92d21847032b6bd843519fe24fa920fefeda0eb3253a73
- Size 5.0MB
- SHA256 0a7a6187399d084b3b92d21847032b6bd843519fe24fa920fefeda0eb3253a73
- MD5 64cf85867b29629fe2dd49411fb7d181
- SHA1 99d1a86fc39ef499b2567a8198c292d0873c0c91
- SHA512 bd03172b56c65b6c55d2ff0b1b2e40cf2932e9993b2ff6771f3277d6d033bd210574c74a83ff25f8ef00ce70d0e54d1472b54c2d673391d9e9ad602f03298480
- SSDEEP 98304:HILJkKObAFtn/PdQEMhpxdgOsBhQMJ9gfah:UJkBbAFMhndgVJ9Y
- TLSH T1B436BF11FA8040B1E5B3413886BAAB7B897DBD30132485C7A3E41D7A4E716D27B3E75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1