General
- Target verify-ua
- Size 10KB
- Sample260905-tk815sxgrd
- SHA256 f87e9240f4f15f3453b080145571acd6599bc35b208de3c70daf7e34710b87fa
- MD5 22d064d1c845b920f9c1ca4ffd0f3886
- SHA1 86933840eef9cc783401be592ba66a05a98954c8
- SHA512 88e1678576f4c5ec02f15913b5bae2983fe9a82ed981e023e1fdfd98b0a33107532fc3469d1abd663400577397076f1dac71a72c0203ad6d7dba050f497e8fbd
- SSDEEP 192:xOtshmAGB28E3PQLJirpoqc6487A0CGKsW:p6/HIrXc6d00rKl
- TLSH T11C22B42098F1127B454AC4CD6A78B719FDC3D04BDB46A129B1BD43982FE7F928847E5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
verify-ua.html
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
verify-ua.html
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target verify-ua
- Size 10KB
- SHA256 f87e9240f4f15f3453b080145571acd6599bc35b208de3c70daf7e34710b87fa
- MD5 22d064d1c845b920f9c1ca4ffd0f3886
- SHA1 86933840eef9cc783401be592ba66a05a98954c8
- SHA512 88e1678576f4c5ec02f15913b5bae2983fe9a82ed981e023e1fdfd98b0a33107532fc3469d1abd663400577397076f1dac71a72c0203ad6d7dba050f497e8fbd
- SSDEEP 192:xOtshmAGB28E3PQLJirpoqc6487A0CGKsW:p6/HIrXc6d00rKl
- TLSH T11C22B42098F1127B454AC4CD6A78B719FDC3D04BDB46A129B1BD43982FE7F928847E5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
2