General
- Target Ajazz.exe
- Size 686KB
- Sample260828-pp2qeaxwfs
- SHA256 8bf091897d4111b1ba0168aefdc8ef99d9703bb6ac65b7f5f06b5a0fe4f91818
- MD5 0c668dda5a7c59d2295affc2c9fce444
- SHA1 78443082824525cf28b405e199d8998d53474669
- SHA512 df6abcff4aa706a780561fea6d2391200ea8ef394754dca21646db29e11c2e1650e1ab53d0d7ffba340b3afb95466521d2b26e8008ded0aeef66a53e83476546
- SSDEEP 12288:fnszyOGEkDBfO0ikMUghIH7SU0ZQmmm+wcCAtI:/GyQ2XiZWHn0ZLmXwcfe
- TLSH T147E47D15B3E504F9E177D17CC9A34906EBB278550770E6CF13948AAA1F23BD09E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ajazz.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ajazz.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Ajazz.exe
- Size 686KB
- SHA256 8bf091897d4111b1ba0168aefdc8ef99d9703bb6ac65b7f5f06b5a0fe4f91818
- MD5 0c668dda5a7c59d2295affc2c9fce444
- SHA1 78443082824525cf28b405e199d8998d53474669
- SHA512 df6abcff4aa706a780561fea6d2391200ea8ef394754dca21646db29e11c2e1650e1ab53d0d7ffba340b3afb95466521d2b26e8008ded0aeef66a53e83476546
- SSDEEP 12288:fnszyOGEkDBfO0ikMUghIH7SU0ZQmmm+wcCAtI:/GyQ2XiZWHn0ZLmXwcfe
- TLSH T147E47D15B3E504F9E177D17CC9A34906EBB278550770E6CF13948AAA1F23BD09E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1