General
- Target 52a49d3d979f06f444627c4264b89394d5f0da36e1fbe490a02efc36f7058a7a
- Size 154KB
- Sample260907-hmzdyafd28
- SHA256 52a49d3d979f06f444627c4264b89394d5f0da36e1fbe490a02efc36f7058a7a
- MD5 7c3c0933de9b83f34c3d1b3ed72a944d
- SHA1 9d8efea6a263615e8c444abf73b9612ffdc5b9d7
- SHA512 c6d2408b3956bd01bae38dac132e7c5e40452092a0434d563825983e516a0e8ecec209a0858547a4015f37d01737e89902c5f7af08d7d3895fff033c8fd62e0b
- SSDEEP 3072:Tgz5Jc5rjEmpUu9PFOckqK0I7OHCp9w8pg7Dd2Qp882PmsAOitWD:8fcOmB9OJ77L97pg7xvd2PUg
- TLSH T126F3F17DED8B3A5ED092C478072E9C6FBBCE743E35C836517167A8B84EA120415DCAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
52a49d3d979f06f444627c4264b89394d5f0da36e1fbe490a02efc36f7058a7a.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 52a49d3d979f06f444627c4264b89394d5f0da36e1fbe490a02efc36f7058a7a
- Size 154KB
- SHA256 52a49d3d979f06f444627c4264b89394d5f0da36e1fbe490a02efc36f7058a7a
- MD5 7c3c0933de9b83f34c3d1b3ed72a944d
- SHA1 9d8efea6a263615e8c444abf73b9612ffdc5b9d7
- SHA512 c6d2408b3956bd01bae38dac132e7c5e40452092a0434d563825983e516a0e8ecec209a0858547a4015f37d01737e89902c5f7af08d7d3895fff033c8fd62e0b
- SSDEEP 3072:Tgz5Jc5rjEmpUu9PFOckqK0I7OHCp9w8pg7Dd2Qp882PmsAOitWD:8fcOmB9OJ77L97pg7xvd2PUg
- TLSH T126F3F17DED8B3A5ED092C478072E9C6FBBCE743E35C836517167A8B84EA120415DCAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of file extensions in Explorer
-
UAC bypass
-
Executes dropped EXE
-
Adds Run key to start application
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
1Hidden Files and Directories
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
4