General
- Target Verifica_Documentazione_Aziendale_2026_d76fb4a8.zip
- Size 131.9MB
- Sample260910-nl142awshs
- SHA256 4cede43d22c179827d3e64e94dbd038e42cc1fe63b8e0fbcb4d1c4c6253f2d87
- MD5 22b144e2c3b1f896f1a365b958ade2e4
- SHA1 ffd490f0313e1af8c710ab874089e42b09cf5fd8
- SHA512 047cbc27dac3426dbb9c45dcee6f0c08c9e58fb395af1c6bf27d025f0e66d88f71019f5f127d36098bc81b66cd125f8c83d41c583e6ef74d7d1183592827d067
- SSDEEP 3145728:qFLiZSe0YUxoQNFj8TuW5y9Vnd9YPBFoqvXYPu1aU/:qxSMoQX8TvA9Vn85aelaU/
- TLSH T1566833285E5F498EF4F3E7B0B4A1B00F5D0A87C57F741A2365E5B09C6E85A920D12E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Verifica_Documentazione_Aziendale_2026_d76fb4a8.zip
Resource
win11ltsc2024-20260709-ja
16 signatures
600 seconds
Behavioral task
behavioral2
Sample
Verifica_Documentazione_Aziendale_2026/Verifica_Documentazione_Aziendale_2026.exe
Resource
win11ltsc2024-20260709-ja
16 signatures
600 seconds
Behavioral task
behavioral3
Sample
Verifica_Documentazione_Aziendale_2026/msvcr100.dll
Resource
win11ltsc2024-20260709-ja
16 signatures
600 seconds
Malware Config
Targets
-
- Target Verifica_Documentazione_Aziendale_2026_d76fb4a8.zip
- Size 131.9MB
- SHA256 4cede43d22c179827d3e64e94dbd038e42cc1fe63b8e0fbcb4d1c4c6253f2d87
- MD5 22b144e2c3b1f896f1a365b958ade2e4
- SHA1 ffd490f0313e1af8c710ab874089e42b09cf5fd8
- SHA512 047cbc27dac3426dbb9c45dcee6f0c08c9e58fb395af1c6bf27d025f0e66d88f71019f5f127d36098bc81b66cd125f8c83d41c583e6ef74d7d1183592827d067
- SSDEEP 3145728:qFLiZSe0YUxoQNFj8TuW5y9Vnd9YPBFoqvXYPu1aU/:qxSMoQX8TvA9Vn85aelaU/
- TLSH T1566833285E5F498EF4F3E7B0B4A1B00F5D0A87C57F741A2365E5B09C6E85A920D12E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
-
- Target Verifica_Documentazione_Aziendale_2026/Verifica_Documentazione_Aziendale_2026.exe
- Size 1.8MB
- SHA256 3d46e95284f93bbb76b3b7e1bf0e1b2d51e8a9411c2b6e649112f22f92de63c2
- MD5 7c22121f33af2bad8656ac09300416ee
- SHA1 81852cb9950604eda0918f625c71b0962865db23
- SHA512 6e3f750326f185a36ae3abdd99efb4adba435767ba5973a2b3fe73403d51806f596129d24a980a24df1b501ed635ecfa2e90a81ec235fc12af04f64306b817e8
- SSDEEP 3072:EMibZuTpOeyp0uTpOMckAKckAGDpA5NlKrss1ywKrss1ySZDvYONDzVFdC5wFVHv:B3F23FukA1kAb0rEbrESZU8wFjNHNI
- TLSH T15D958C83EA3AFD27FA6C38F5D888D9A12C0D7D650AE3747239BAF76E94335115B00152
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
-
- Target Verifica_Documentazione_Aziendale_2026/msvcr100.dll
- Size 120.3MB
- SHA256 dbf08a6cd1f569b9e74aa7b5819aa9ecdfb060d48ea45e12ee98b87215bfaeef
- MD5 f2c58a550a7014be3944ce75e012e0ac
- SHA1 566e659652351428b9dbdbb4633ec5a3491a2167
- SHA512 245c23869a6ce9d98542757edab724620a0fbab8ea981ec582053e9ede4a0654f02782f7b1cdf78e6a74ed8665f3c255ff9538a27411a5860d67c330d75eac23
- SSDEEP 3145728:g1Tcd64QSe/I4L/Te9qcRS3znTPmf3B+WjLKF/:ghWuI4He9tE3znKfcSg
- TLSH T109583399F6FF4EC5F4A5A3743723E34A148F4BF11E8D17A323D02AA49F052269993D42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Boot or Logon Initialization Scripts
1Logon Script (Windows)
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Boot or Logon Initialization Scripts
1Logon Script (Windows)
1