General
- Target deneme.exe
- Size 258KB
- Sample260828-wla7lsdg53
- SHA256 8d48a06f32ad9f7af359f093ff26c809fafc9ae6d24c6777ed6d20b0e655644e
- MD5 0264924768b292072fb191b0a58d017e
- SHA1 ac58976b9cea739deade54af23ab7f6b8386be6f
- SHA512 d29902fbcf733f43e26737e7d3674a897aad39640664bb99d787fdc58cd839ee00dc885d0c393a2c281e1406d46efbad2fc0c9c81838075d63e4f75fdcb2d425
- SSDEEP 6144:fZFUN8hEJnWUJkL0mb601zGsPclg6qDCHZRXDH+E:fLhEJWUJkQmDEg0R+E
- TLSH T1FD446E10B591D032E9B70977CEBE8B6D8A2CB8500F5569CBA3C81DEECB705D0BB31616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
deneme.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
deneme.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target deneme.exe
- Size 258KB
- SHA256 8d48a06f32ad9f7af359f093ff26c809fafc9ae6d24c6777ed6d20b0e655644e
- MD5 0264924768b292072fb191b0a58d017e
- SHA1 ac58976b9cea739deade54af23ab7f6b8386be6f
- SHA512 d29902fbcf733f43e26737e7d3674a897aad39640664bb99d787fdc58cd839ee00dc885d0c393a2c281e1406d46efbad2fc0c9c81838075d63e4f75fdcb2d425
- SSDEEP 6144:fZFUN8hEJnWUJkL0mb601zGsPclg6qDCHZRXDH+E:fLhEJWUJkQmDEg0R+E
- TLSH T1FD446E10B591D032E9B70977CEBE8B6D8A2CB8500F5569CBA3C81DEECB705D0BB31616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Adds Run key to start application
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1