General
- Target hrx.exe
- Size 383KB
- Sample260908-t867fseq71
- SHA256 b27905e17203e0e343ec2e3d6b5cd34105b42027ad6bfd1242e4c299d41e663c
- MD5 863b5af0695b74d7c79ea5433b4773a5
- SHA1 02cc42f823530931f7488ebee211ce70e40c6d39
- SHA512 65428a4da61d5975364b1f343e0cdcf3ee8f7ce7ce3d67e1b37d4d5740ea847ddea4c0997243191307fd182b3793e8de6360c322a553e7148287c4be3c23d9ec
- SSDEEP 6144:SQzqgXdmgYUvlNy7YqFWr7BtCWhs2iJyso+6QS9kgRPkm18KnY:xdy7Y3tCWe2K++6h9kgRPSK
- TLSH T148849D15F7A514F9E2778134C9626507DB723C8E07A0EACB13A88F961F336D09E7A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hrx.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
hrx.exe
Resource
win11ltsc2024-20260709-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target hrx.exe
- Size 383KB
- SHA256 b27905e17203e0e343ec2e3d6b5cd34105b42027ad6bfd1242e4c299d41e663c
- MD5 863b5af0695b74d7c79ea5433b4773a5
- SHA1 02cc42f823530931f7488ebee211ce70e40c6d39
- SHA512 65428a4da61d5975364b1f343e0cdcf3ee8f7ce7ce3d67e1b37d4d5740ea847ddea4c0997243191307fd182b3793e8de6360c322a553e7148287c4be3c23d9ec
- SSDEEP 6144:SQzqgXdmgYUvlNy7YqFWr7BtCWhs2iJyso+6QS9kgRPkm18KnY:xdy7Y3tCWe2K++6h9kgRPSK
- TLSH T148849D15F7A514F9E2778134C9626507DB723C8E07A0EACB13A88F961F336D09E7A712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2