General
- Target SezPerm.exe
- Size 373KB
- Sample260828-yamsdaea46
- SHA256 322e9338131ca4a04cbc291a8ef4ccc032a0af7c40e9c4e051e7d8b307de19bb
- MD5 ae949d87b34449c2f56cad880982e1b3
- SHA1 f3078b02a78eb7b6f5d3710b9957e089252e220e
- SHA512 42949cdf091c7339e47294b419ce776f9ab66709e85ff74dca211fb5f252036fea4bda3bd9207a672105f3896a552c526934849adfb398f716f69725076ffacb
- SSDEEP 6144:UsLqdufVUNDa4/ChpoVBOdwXcZbADAo8P9JJotIoEKJy:PFUNDa4agrKsDAo8VDYI9KJy
- TLSH T176846C17BB5018FAE823C1B88895864AF5627C2607A0FDCB13915F565F37AD2BE79303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SezPerm.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
SezPerm.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target SezPerm.exe
- Size 373KB
- SHA256 322e9338131ca4a04cbc291a8ef4ccc032a0af7c40e9c4e051e7d8b307de19bb
- MD5 ae949d87b34449c2f56cad880982e1b3
- SHA1 f3078b02a78eb7b6f5d3710b9957e089252e220e
- SHA512 42949cdf091c7339e47294b419ce776f9ab66709e85ff74dca211fb5f252036fea4bda3bd9207a672105f3896a552c526934849adfb398f716f69725076ffacb
- SSDEEP 6144:UsLqdufVUNDa4/ChpoVBOdwXcZbADAo8P9JJotIoEKJy:PFUNDa4agrKsDAo8VDYI9KJy
- TLSH T176846C17BB5018FAE823C1B88895864AF5627C2607A0FDCB13915F565F37AD2BE79303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2