General
- Target 9b01feb0a2cf779a9bb499b7ae6091d8415a0a865ffb431db04c033c0253e8ee
- Size 3.2MB
- Sample260912-lvmxnatdnh
- SHA256 9b01feb0a2cf779a9bb499b7ae6091d8415a0a865ffb431db04c033c0253e8ee
- MD5 f08738bda3977b089a260211837630cb
- SHA1 807c4e5844c03ac495b676da3b8b4d5aa2218c0d
- SHA512 ba47d4d31e36d69d848e2d42a31f606c0d3cf7e4f76ea450fc7fbf1e01cde56598a88a7af3364062a30f6f65eb939eab8e05e5ec2784dca236760038873981bb
- SSDEEP 98304:DraaV1pFD1bzHwFRTbiGxG6bxQOb3OxDJy6Hy3zttvljHqe:/a01b0RviGxG6lbZL3ztNl7qe
- TLSH T170F53357BAF98139C4DB907E9010F3B597A13D724B92D8C2A484F62C9D786E28F3C725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9b01feb0a2cf779a9bb499b7ae6091d8415a0a865ffb431db04c033c0253e8ee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 9b01feb0a2cf779a9bb499b7ae6091d8415a0a865ffb431db04c033c0253e8ee
- Size 3.2MB
- SHA256 9b01feb0a2cf779a9bb499b7ae6091d8415a0a865ffb431db04c033c0253e8ee
- MD5 f08738bda3977b089a260211837630cb
- SHA1 807c4e5844c03ac495b676da3b8b4d5aa2218c0d
- SHA512 ba47d4d31e36d69d848e2d42a31f606c0d3cf7e4f76ea450fc7fbf1e01cde56598a88a7af3364062a30f6f65eb939eab8e05e5ec2784dca236760038873981bb
- SSDEEP 98304:DraaV1pFD1bzHwFRTbiGxG6bxQOb3OxDJy6Hy3zttvljHqe:/a01b0RviGxG6lbZL3ztNl7qe
- TLSH T170F53357BAF98139C4DB907E9010F3B597A13D724B92D8C2A484F62C9D786E28F3C725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1