General
- Target 2fa6d54d357b1a7ff61d654915fd97011b545142ba7cc77b01fd755042a40595
- Size 3.2MB
- Sample260910-n3e8wsbp6y
- SHA256 2fa6d54d357b1a7ff61d654915fd97011b545142ba7cc77b01fd755042a40595
- MD5 f519462a48da2d4cffbda5d079349b3e
- SHA1 5e9767a62243887fe148c216450534ababb1db7b
- SHA512 5e822c01e65a590f33ec1256d460470371af1e0d3f3a25c6fabe5516a3c9db133255575d57bd296c0e0858a7e9f003d1f81a4481b68c42b6a17a5ae6d8167e96
- SSDEEP 49152:D1BkhTnfrjcZf7y0p5z2TDj1x9rQSYo6HdKXU2mypRUGqiekHiNILJHUG1sFFP:D1Bk9nfUZz9pADhZYoFUspGXixEILRSl
- TLSH T14CF53303FADDD0BCE13B55B0A037E23E09BD3964C4F6D8666181268DC6726A09657F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2fa6d54d357b1a7ff61d654915fd97011b545142ba7cc77b01fd755042a40595.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2fa6d54d357b1a7ff61d654915fd97011b545142ba7cc77b01fd755042a40595
- Size 3.2MB
- SHA256 2fa6d54d357b1a7ff61d654915fd97011b545142ba7cc77b01fd755042a40595
- MD5 f519462a48da2d4cffbda5d079349b3e
- SHA1 5e9767a62243887fe148c216450534ababb1db7b
- SHA512 5e822c01e65a590f33ec1256d460470371af1e0d3f3a25c6fabe5516a3c9db133255575d57bd296c0e0858a7e9f003d1f81a4481b68c42b6a17a5ae6d8167e96
- SSDEEP 49152:D1BkhTnfrjcZf7y0p5z2TDj1x9rQSYo6HdKXU2mypRUGqiekHiNILJHUG1sFFP:D1Bk9nfUZz9pADhZYoFUspGXixEILRSl
- TLSH T14CF53303FADDD0BCE13B55B0A037E23E09BD3964C4F6D8666181268DC6726A09657F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1