General
- Target System32.exe
- Size 9.1MB
- Sample260913-krtqcseq7t
- SHA256 69ca6c2a6438dab8a55b1ae87ab1a4f14273dbfb3caf10cf2c8630423345ffad
- MD5 a8e1107db45417e710802e300578e591
- SHA1 56b86225996b3a2e2f53c8524c27c8aeefec997e
- SHA512 8f60355bc3c96d2014b91426c755075bc2f317b6ba8f064cb6c1ea22fa819e3346f046e40c4cda791c1ff607b2775f0def437cbc2be173b81abd6ded40df1c7d
- SSDEEP 196608:aztnpxuBwB9drbdXQaN+MofR4RmhDCMPWhRWHswqMpCTFDE7E:yzx/hrbdXQfM6R4RmhDzC4HswqMi/
- TLSH T1A6A6334896E004FAE463603E99769606E3F27D120BA6C9DF07E40B2D1FA72F15C3D676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
System32.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
System32.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target System32.exe
- Size 9.1MB
- SHA256 69ca6c2a6438dab8a55b1ae87ab1a4f14273dbfb3caf10cf2c8630423345ffad
- MD5 a8e1107db45417e710802e300578e591
- SHA1 56b86225996b3a2e2f53c8524c27c8aeefec997e
- SHA512 8f60355bc3c96d2014b91426c755075bc2f317b6ba8f064cb6c1ea22fa819e3346f046e40c4cda791c1ff607b2775f0def437cbc2be173b81abd6ded40df1c7d
- SSDEEP 196608:aztnpxuBwB9drbdXQaN+MofR4RmhDCMPWhRWHswqMpCTFDE7E:yzx/hrbdXQfM6R4RmhDzC4HswqMi/
- TLSH T1A6A6334896E004FAE463603E99769606E3F27D120BA6C9DF07E40B2D1FA72F15C3D676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Possible privilege escalation attempt
-
Loads dropped DLL
-
Modifies file permissions
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory