General
- Target client-rust(2).exe
- Size 12.6MB
- Sample260908-mrnkfsycjf
- SHA256 5f4e48739a09def7d7835158dfc8b300e2c300973b796386fbfb86f8ab44efda
- MD5 252f8274110da45560147c1b91c01940
- SHA1 5801e288641676a5a20ab68cadc6bae567dc3262
- SHA512 bbad6f39a7f51d1f8d7f14c6638014ced7cecf4a03329dfbfb30d68825e713c3794565c4e49742a067a58ca412b95455fc3d8461c9a93e466483df85f5dc3efb
- SSDEEP 98304:YOB2/DNtzLFnsvZ4dJjK+Kun91gkFnM3JCBc+F+rpg39jAY+sP4prGVA5kQ/VQ1e:YFTpGkNz3iYR4prfF9
- TLSH T185D66CD3A14508ADC267C73B897B862EA77533813B6677DB8D4C4D3AAF066C28F19344
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
client-rust(2).exe
Resource
win11ltsc2024-20260709-en
22 signatures
900 seconds
Malware Config
Targets
-
- Target client-rust(2).exe
- Size 12.6MB
- SHA256 5f4e48739a09def7d7835158dfc8b300e2c300973b796386fbfb86f8ab44efda
- MD5 252f8274110da45560147c1b91c01940
- SHA1 5801e288641676a5a20ab68cadc6bae567dc3262
- SHA512 bbad6f39a7f51d1f8d7f14c6638014ced7cecf4a03329dfbfb30d68825e713c3794565c4e49742a067a58ca412b95455fc3d8461c9a93e466483df85f5dc3efb
- SSDEEP 98304:YOB2/DNtzLFnsvZ4dJjK+Kun91gkFnM3JCBc+F+rpg39jAY+sP4prGVA5kQ/VQ1e:YFTpGkNz3iYR4prfF9
- TLSH T185D66CD3A14508ADC267C73B897B862EA77533813B6677DB8D4C4D3AAF066C28F19344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
4