General
- Target Server.exe
- Size 43KB
- Sample260913-x3662ssdpg
- SHA256 30dd8fddc1acfe06215bb2a15087e5e959f5ab52ff314fc993110a7446a5e723
- MD5 f855e48e2f641f13958d548b5a0b832e
- SHA1 0089a19fef74b0095a1e72fa6cd1cf04c0313978
- SHA512 315fe6212864fbe8564837f57f2f7ed4c1c4ca64e0a4097b4e9ec7125abdce6ad0822e6a4b7b145ed4c2f8b6faa749f308c759fb68a2aa344ab9f7dc77a426a1
- SSDEEP 768:BGNNT8uX29ZSYg6D0rK9GTW2Es5U1v6HatjHX8qvtG1WVIL19x2NPUzKHCCjPka0:E6GvEmaxTitj2xHCCrk
- TLSH T13F13D78F63940B22C27CABB94552E71957F1B3871D67C39D0CEC88DA1F7AB04998B1D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Server.exe
- Size 43KB
- SHA256 30dd8fddc1acfe06215bb2a15087e5e959f5ab52ff314fc993110a7446a5e723
- MD5 f855e48e2f641f13958d548b5a0b832e
- SHA1 0089a19fef74b0095a1e72fa6cd1cf04c0313978
- SHA512 315fe6212864fbe8564837f57f2f7ed4c1c4ca64e0a4097b4e9ec7125abdce6ad0822e6a4b7b145ed4c2f8b6faa749f308c759fb68a2aa344ab9f7dc77a426a1
- SSDEEP 768:BGNNT8uX29ZSYg6D0rK9GTW2Es5U1v6HatjHX8qvtG1WVIL19x2NPUzKHCCjPka0:E6GvEmaxTitj2xHCCrk
- TLSH T13F13D78F63940B22C27CABB94552E71957F1B3871D67C39D0CEC88DA1F7AB04998B1D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1