General
- Target DeltaFix.exe
- Size 209KB
- Sample260909-rfpetsxwh1
- SHA256 6f1c0d49ced4a1f31b980c2c9e877e6da0eeeb00333aa1132594389a910f5769
- MD5 2cabe9b2492802d53d2b1a33cf132b16
- SHA1 50982d9946647f812975e942b58bd68daf325210
- SHA512 3aa8f20021961e3b9f132506883eb6afa79e9a99e0ce7c996049b9e57b9d855791bef77c034c1bd4438bcf8672dda623aaa4e96fb7ecac3f7825e1ae67197308
- SSDEEP 6144:TEhfGkHBdZunRtjUlx9aygCSCpMW90KImQijnfbDL:Q++dEj
- TLSH T1BE245D98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0F66D27311A755A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DeltaFix.exe
Resource
win11ltsc2024-20260709-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
DeltaFix.exe
Resource
win10v2004-20260513-en
9 signatures
900 seconds
Behavioral task
behavioral3
Sample
DeltaFix.exe
Resource
win10ltsc2021-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral4
Sample
DeltaFix.exe
Resource
win11-20260513-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target DeltaFix.exe
- Size 209KB
- SHA256 6f1c0d49ced4a1f31b980c2c9e877e6da0eeeb00333aa1132594389a910f5769
- MD5 2cabe9b2492802d53d2b1a33cf132b16
- SHA1 50982d9946647f812975e942b58bd68daf325210
- SHA512 3aa8f20021961e3b9f132506883eb6afa79e9a99e0ce7c996049b9e57b9d855791bef77c034c1bd4438bcf8672dda623aaa4e96fb7ecac3f7825e1ae67197308
- SSDEEP 6144:TEhfGkHBdZunRtjUlx9aygCSCpMW90KImQijnfbDL:Q++dEj
- TLSH T1BE245D98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0F66D27311A755A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1