General
- Target test.rar
- Size 66KB
- Sample260828-hl4x2aca99
- SHA256 d3ee39ad65c14ca9f5b8aeb28a28ea95981c5dd3df68b8466f7c92589461d236
- MD5 5e44864a539484ee6dc9fe50be02172f
- SHA1 0b0bb4e1eacee9c4453506e8a625c49026f96ccd
- SHA512 f5cfa0be64fafd13889ef7547035a4cca1885fb52b3831d763afca08327d97139fd079cec4d3d2defa35ddacd7a59bdfb7408334ceb61eb4b6bcb46219696b81
- SSDEEP 1536:DeltKq38kNrDR4Kk5i/upU1GfOq2VH3XDHaO1IDY3KAYtqyYcGzq298S2q:SvKqbrltk5RpUCOnVHOwIeKcq2CS1
- TLSH T1EB63015285C7F2AFBB62EB958C637765750B0B088B2FA230386C446CC576F618BD0B4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
test/DigiMapper.exe
Resource
win10ltsc2021-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
test/DigiMapper.exe
Resource
win11-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
test/zhang-wei.sys
Resource
win10ltsc2021-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
test/zhang-wei.sys
Resource
win11-20260513-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target test/DigiMapper.exe
- Size 138KB
- SHA256 57832f7a25c5cd0dfca09c54d0019e4f19a0d27a949a92dc68baf35b72be8211
- MD5 365fc713b2097470bd269602b5d54eb2
- SHA1 4e237fb146ed252246ad81231294f877edbc35c7
- SHA512 5033693df40f39a568967b26977603c353d59e538d43da430838875d5955181cc5533a3ae8de4aaf23b8841046e72f970f539879f44c17a633b72df08ead29d3
- SSDEEP 3072:ejVYisyVqzOSDMbfVP+qmJTQSaMm5/6Ygnzg+zOG:ebsyVqzOswfUWlBgns+q
- TLSH T112D35B2BE659207ED2A6D9BDCA524912FBB27C850751B7CF136049B60F627D06F3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target test/zhang-wei.sys
- Size 19KB
- SHA256 7dbaef34327b06c1cd0dd09b393feb47751dcd19bc3312b67efba43511b5c4f9
- MD5 66ecd8fe7e3f30dc5865ff20fc575098
- SHA1 7b1266dd799ecfbce31ab5c993f856920317188f
- SHA512 07bc1feed91879d0ec6291e54d737973ff45632613c64f8362050cc4b98972532681821ae57fbf2e2dfe49fd01c1e0b02cfd0762b96c09da9e09ed1d733c4e44
- SSDEEP 384:UzqElyeFhvu5aApLP3h3XifX7R9zUlx07Q:UzqsyeF0pt3yF9zUz
- TLSH T1FB925BE1909890C2DA5FB83043E5D757BC7DB2930B121AFF00A5E9481E97BC9EF38569
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1