General
- Target emi_client.exe
- Size 4.9MB
- Sample260827-qetsgsvfjf
- SHA256 9a217f4a38355dbc4484636edea875edcd637890b4f78750c30fd7b1fb58b5ac
- MD5 f368d7e17929cb0c439f06a4042791e6
- SHA1 87f608d8512be0234da4561e33a99e6589cb7cd6
- SHA512 a830ad3d29aafa70e06f995d96027c2107a40cb3e16c758d870f42d50bd763a4a1c11de48ef026d5de42b5e3850bc32e3ef70c10cb02d358550aa80a7262828c
- SSDEEP 49152:wblU1+NVnTp/XCO+0PH6oA+5aW+T1KFHpcxdSgeQZqvhdFICOSfixfGFchdk+C3T:oHDiYSWfu/3+WQIryXN
- TLSH T17B361922BB6A99ADC89AC0B483964B72593134CB0B3579FF448452383F6DAF51F3C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
emi_client.exe
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target emi_client.exe
- Size 4.9MB
- SHA256 9a217f4a38355dbc4484636edea875edcd637890b4f78750c30fd7b1fb58b5ac
- MD5 f368d7e17929cb0c439f06a4042791e6
- SHA1 87f608d8512be0234da4561e33a99e6589cb7cd6
- SHA512 a830ad3d29aafa70e06f995d96027c2107a40cb3e16c758d870f42d50bd763a4a1c11de48ef026d5de42b5e3850bc32e3ef70c10cb02d358550aa80a7262828c
- SSDEEP 49152:wblU1+NVnTp/XCO+0PH6oA+5aW+T1KFHpcxdSgeQZqvhdFICOSfixfGFchdk+C3T:oHDiYSWfu/3+WQIryXN
- TLSH T17B361922BB6A99ADC89AC0B483964B72593134CB0B3579FF448452383F6DAF51F3C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1