General
- Target UrbanVPN.exe
- Size 70.5MB
- Sample260908-a64trsxtb1
- SHA256 34eb83f3f4b7436da13f9ffbc241658c03887c74e574764e40dc8ab93c05bcad
- MD5 516e7bfbc62b214e990a7a56ec157266
- SHA1 9bb5da1c3fc6396b17abeaff5df633b5bf1ac7d0
- SHA512 57032824f15f2717917869962e4c710c95a5ce1bc74a22a7f5c083bdf60fbed4ba3ac22487ef65502d6c97ac6cd5af3c37f2c6fda4fca60f2d6904542cce0ba7
- SSDEEP 1572864:PFxb8yuOga7/5RCgiqnyuP0y0fqzYOr2gPAvfxzhpx56Bu61FZPZdxQcUze:jziqnFsyuqzp4xb6I61vhdicMe
- TLSH T13BF73321B58AC42BD66215B05B2D9AAE562CBE350B7148C7B3DCBD1F27B45C30233E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
UrbanVPN.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
UrbanVPN.exe
Resource
win11ltsc2024-20260709-en
25 signatures
150 seconds
Malware Config
Targets
-
- Target UrbanVPN.exe
- Size 70.5MB
- SHA256 34eb83f3f4b7436da13f9ffbc241658c03887c74e574764e40dc8ab93c05bcad
- MD5 516e7bfbc62b214e990a7a56ec157266
- SHA1 9bb5da1c3fc6396b17abeaff5df633b5bf1ac7d0
- SHA512 57032824f15f2717917869962e4c710c95a5ce1bc74a22a7f5c083bdf60fbed4ba3ac22487ef65502d6c97ac6cd5af3c37f2c6fda4fca60f2d6904542cce0ba7
- SSDEEP 1572864:PFxb8yuOga7/5RCgiqnyuP0y0fqzYOr2gPAvfxzhpx56Bu61FZPZdxQcUze:jziqnFsyuqzp4xb6I61vhdicMe
- TLSH T13BF73321B58AC42BD66215B05B2D9AAE562CBE350B7148C7B3DCBD1F27B45C30233E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1