General
- Target f2fc486fb3e0619cfd403e273b76a370d012d84672a1409c16d62f06141be336
- Size 715KB
- Sample260831-pgwjes1fke
- SHA256 f2fc486fb3e0619cfd403e273b76a370d012d84672a1409c16d62f06141be336
- MD5 b82387c20444ff1355cc9a3bd359797d
- SHA1 1cec6d09b497b572e59af0827d3c24bad32acb12
- SHA512 bcacf5bf63a70d734724a25b383d03de52b4cc837081dddbc4d98522406e8751514a86b0d7719de4c5a3a44c5886ea6084443ee0f4e5b28c692ade7a1df698a7
- SSDEEP 12288:w4Ryed8I7r/7mzUG4Ryed8I7r/7mKzCFYgGt8NO+SL1fh7NhO0ZUkfV1n:w4R5CIH/7o4R5CIH/7fuYf8NO+W20G0r
- TLSH T128F46B13A75444AAE4A7C17469658116BA317D750760FCDFB3C07B0A2E32BD2BAB4B0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f2fc486fb3e0619cfd403e273b76a370d012d84672a1409c16d62f06141be336.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target f2fc486fb3e0619cfd403e273b76a370d012d84672a1409c16d62f06141be336
- Size 715KB
- SHA256 f2fc486fb3e0619cfd403e273b76a370d012d84672a1409c16d62f06141be336
- MD5 b82387c20444ff1355cc9a3bd359797d
- SHA1 1cec6d09b497b572e59af0827d3c24bad32acb12
- SHA512 bcacf5bf63a70d734724a25b383d03de52b4cc837081dddbc4d98522406e8751514a86b0d7719de4c5a3a44c5886ea6084443ee0f4e5b28c692ade7a1df698a7
- SSDEEP 12288:w4Ryed8I7r/7mzUG4Ryed8I7r/7mKzCFYgGt8NO+SL1fh7NhO0ZUkfV1n:w4R5CIH/7o4R5CIH/7fuYf8NO+W20G0r
- TLSH T128F46B13A75444AAE4A7C17469658116BA317D750760FCDFB3C07B0A2E32BD2BAB4B0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1