General
- Target random spam thing.exe
- Size 34.8MB
- Sample260907-klsaca1tbw
- SHA256 1c3accb5f1bc7f1ba32859a7e627248413b414177c183fcec70af688ccfa9bf0
- MD5 271c7d4219a39e7bb65b9e2cb6f7abc2
- SHA1 72cc556f7fb3ca7fa7849a03866cbebc299abce3
- SHA512 2e2cb7b54bddd9c0e202393ac07c87479dc59a471d28837df04af3165622db10110fceb40a7d0fd9f47cbba923e7d25e22f4bd6f1851e901cba0b42d67777506
- SSDEEP 786432:gljSYGumYcW8MoYFrHFFNnGCnkFOjTNGCgK/2ti2nRJeuaxsRPN9pcEhLB34:gjSpWaYFzFFNnGCnkFK4C2rNVN9pdhLS
- TLSH T1BC873354BFD018C5E99A1638D4E9D872A6E9FA922365C08F45E689430F630F3BD38F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
random spam thing.exe
Resource
win11-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target random spam thing.exe
- Size 34.8MB
- SHA256 1c3accb5f1bc7f1ba32859a7e627248413b414177c183fcec70af688ccfa9bf0
- MD5 271c7d4219a39e7bb65b9e2cb6f7abc2
- SHA1 72cc556f7fb3ca7fa7849a03866cbebc299abce3
- SHA512 2e2cb7b54bddd9c0e202393ac07c87479dc59a471d28837df04af3165622db10110fceb40a7d0fd9f47cbba923e7d25e22f4bd6f1851e901cba0b42d67777506
- SSDEEP 786432:gljSYGumYcW8MoYFrHFFNnGCnkFOjTNGCgK/2ti2nRJeuaxsRPN9pcEhLB34:gjSpWaYFzFFNnGCnkFK4C2rNVN9pdhLS
- TLSH T1BC873354BFD018C5E99A1638D4E9D872A6E9FA922365C08F45E689430F630F3BD38F74
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1