General
- Target AutoHotkey_2.0.27_setup.exe
- Size 3.1MB
- Sample260910-3ed39ay1hw
- SHA256 6b4f735184975afa2d8dd6afe0acc6464abdc98a4bfc3805170180675d069435
- MD5 8ab34bf78db13513709625eb6ab7d9e1
- SHA1 1c05a87750c5b8736da215a3ae44bab66816cf4d
- SHA512 b604c37044a6a265e88e2ee736a7ec95f6cff200827a5d82815aa157ac4a8816d9297fb91fec91e0168a669b8de1605080cf6bd58c1008cbafc0677a543b3c5e
- SSDEEP 98304:qcArUd+1pezEEwyVQcAxXOtugf1mj0WscB:qcArUdUc3wyVQjxa18fsm
- TLSH T116E53377BD60621ED0D88AFD44B2AE1978209EB66FD99C533344B72474B2A4778F420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AutoHotkey_2.0.27_setup.exe
Resource
win10ltsc2021-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target AutoHotkey_2.0.27_setup.exe
- Size 3.1MB
- SHA256 6b4f735184975afa2d8dd6afe0acc6464abdc98a4bfc3805170180675d069435
- MD5 8ab34bf78db13513709625eb6ab7d9e1
- SHA1 1c05a87750c5b8736da215a3ae44bab66816cf4d
- SHA512 b604c37044a6a265e88e2ee736a7ec95f6cff200827a5d82815aa157ac4a8816d9297fb91fec91e0168a669b8de1605080cf6bd58c1008cbafc0677a543b3c5e
- SSDEEP 98304:qcArUd+1pezEEwyVQcAxXOtugf1mj0WscB:qcArUdUc3wyVQjxa18fsm
- TLSH T116E53377BD60621ED0D88AFD44B2AE1978209EB66FD99C533344B72474B2A4778F420F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
3Subvert Trust Controls
2Install Root Certificate
2