General
- Target 169037512b06a68154c130066b31a4cf3cb090d5fa0896904ab85b616e68233c
- Size 3.2MB
- Sample260909-vza84aydpf
- SHA256 169037512b06a68154c130066b31a4cf3cb090d5fa0896904ab85b616e68233c
- MD5 5b725d2b824239d1bfdd0d09e3085212
- SHA1 c564fc08bd3213469a251c9c6eea61f1ca0bdbb7
- SHA512 c2b36bb346ac34b7b8300007d50557a9980823d4bf6fa6771a8a11e83b7e0e0cd4782ff284e353c4f8cfb7602f15bff28a31a934a28c31631ecd398f53ed298e
- SSDEEP 49152:D1GD6dhhcFxVwx7PV5LpH+xUnmNGu7MU8xYVMy8bw3sRytLZ8+pcNcBAGXtq9kGk:D1lM3GPTL4xpGQ8TnadJBAqg9i
- TLSH T178F533A3672A53C6EDA612F5C6AECB62325D3534C8B8C88B37C5369C84D1BC91F540B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
169037512b06a68154c130066b31a4cf3cb090d5fa0896904ab85b616e68233c.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 169037512b06a68154c130066b31a4cf3cb090d5fa0896904ab85b616e68233c
- Size 3.2MB
- SHA256 169037512b06a68154c130066b31a4cf3cb090d5fa0896904ab85b616e68233c
- MD5 5b725d2b824239d1bfdd0d09e3085212
- SHA1 c564fc08bd3213469a251c9c6eea61f1ca0bdbb7
- SHA512 c2b36bb346ac34b7b8300007d50557a9980823d4bf6fa6771a8a11e83b7e0e0cd4782ff284e353c4f8cfb7602f15bff28a31a934a28c31631ecd398f53ed298e
- SSDEEP 49152:D1GD6dhhcFxVwx7PV5LpH+xUnmNGu7MU8xYVMy8bw3sRytLZ8+pcNcBAGXtq9kGk:D1lM3GPTL4xpGQ8TnadJBAqg9i
- TLSH T178F533A3672A53C6EDA612F5C6AECB62325D3534C8B8C88B37C5369C84D1BC91F540B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1