General
- Target adf263d8561deeab4a08246a5541870c4a89a5fb8d5a8a754e2f7e783edef543
- Size 2.0MB
- Sample260827-r3dxlsaa28
- SHA256 adf263d8561deeab4a08246a5541870c4a89a5fb8d5a8a754e2f7e783edef543
- MD5 cdd287feaac9f04a22f8e1e19446e6bd
- SHA1 4807b8c63c89760e1081dec81cc710f4400206f8
- SHA512 753b67e922fbf601c00135475bc1be19c70580ccc56d45fca686f1ec5eccb8c7c114c26caaffec8b7b553b982ee855b94ff36998231a538836781d2337428509
- SSDEEP 24576:sPFW4/2+EFFJKIPfvMAC+IE6DDjLZ+jnRZ1gFB0iKV1gIM3T/shDPgBaPjH641X7:ykQE7J5HkAnAXecwx4s6tT
- TLSH T1D2A5023019F92599CA98AF3FD33ABC08A1C539F96737E5F35235AF1944B15E0863281B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
adf263d8561deeab4a08246a5541870c4a89a5fb8d5a8a754e2f7e783edef543.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target adf263d8561deeab4a08246a5541870c4a89a5fb8d5a8a754e2f7e783edef543
- Size 2.0MB
- SHA256 adf263d8561deeab4a08246a5541870c4a89a5fb8d5a8a754e2f7e783edef543
- MD5 cdd287feaac9f04a22f8e1e19446e6bd
- SHA1 4807b8c63c89760e1081dec81cc710f4400206f8
- SHA512 753b67e922fbf601c00135475bc1be19c70580ccc56d45fca686f1ec5eccb8c7c114c26caaffec8b7b553b982ee855b94ff36998231a538836781d2337428509
- SSDEEP 24576:sPFW4/2+EFFJKIPfvMAC+IE6DDjLZ+jnRZ1gFB0iKV1gIM3T/shDPgBaPjH641X7:ykQE7J5HkAnAXecwx4s6tT
- TLSH T1D2A5023019F92599CA98AF3FD33ABC08A1C539F96737E5F35235AF1944B15E0863281B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Modifies visibility of file extensions in Explorer
-
UAC bypass
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1