General
- Target PullosOpti.exe
- Size 1.1MB
- Sample260827-hhmvcaej2v
- SHA256 6436f379cf26149b0323db8901204c98b76668b0050fd45d5d7a604c6606de54
- MD5 9cae54dd0065bfe31b8e5367720509c9
- SHA1 c08cedf3d7264a8928bb06a630bb9f5bcc1372a5
- SHA512 8f9e641d886053c72f6f029659cb714cd06110bf5484aadc8ba85d57c2760e3177b50cf991cef1f41ad157ae5cf2515ff06b9d6a27de64a2da5411c358a6632e
- SSDEEP 24576:cPQJp+Ntj3hhQoSkN4zw1nzEZjfnyFG8+8:cM+X0oS3zwNmn0G8t
- TLSH T16635AE46E2A901E9C17BC1388256970BEB71740613206FCB27E11F696F63BE27B3E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
PullosOpti.exe
Resource
win11ltsc2024-20260709-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target PullosOpti.exe
- Size 1.1MB
- SHA256 6436f379cf26149b0323db8901204c98b76668b0050fd45d5d7a604c6606de54
- MD5 9cae54dd0065bfe31b8e5367720509c9
- SHA1 c08cedf3d7264a8928bb06a630bb9f5bcc1372a5
- SHA512 8f9e641d886053c72f6f029659cb714cd06110bf5484aadc8ba85d57c2760e3177b50cf991cef1f41ad157ae5cf2515ff06b9d6a27de64a2da5411c358a6632e
- SSDEEP 24576:cPQJp+Ntj3hhQoSkN4zw1nzEZjfnyFG8+8:cM+X0oS3zwNmn0G8t
- TLSH T16635AE46E2A901E9C17BC1388256970BEB71740613206FCB27E11F696F63BE27B3E715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Defender Real-time Protection settings
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Stops running service(s)
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1System Services
1Service Execution
1