General
- Target {469B932E-3DFB-485e-8B9A-0542FAA55C80}.exe
- Size 60KB
- Sample260924-dkevasce95
- SHA256 4fb9fe1d3b2afd04aea8eb0f90720b045cb02d6fb8fdb3c80616e30de4300770
- MD5 beed42b3f0f96fda7cf42cdc01470860
- SHA1 604b350c7b6d112df00fb438cf1849ded1843a5c
- SHA512 78dc39a50354631c0eade9b7ca90e0fab6a2082f2f1463d41fe176fc7dbe6cbe3cd73c312e62c85134059da5a4eb590dbf43a662fdaca24dfeb73ad75646959d
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroomaQY4/CFsrFJGlMlrWg6j8s:vvw9816vhKQLroLaQY4/wQTGaWhj8s
- TLSH T158537C835BEA2CF2F6F10232057859B5D22B9AD5A15DBEDBBB80CE1504372D1D53F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
{469B932E-3DFB-485e-8B9A-0542FAA55C80}.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
{469B932E-3DFB-485e-8B9A-0542FAA55C80}.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target {469B932E-3DFB-485e-8B9A-0542FAA55C80}.exe
- Size 60KB
- SHA256 4fb9fe1d3b2afd04aea8eb0f90720b045cb02d6fb8fdb3c80616e30de4300770
- MD5 beed42b3f0f96fda7cf42cdc01470860
- SHA1 604b350c7b6d112df00fb438cf1849ded1843a5c
- SHA512 78dc39a50354631c0eade9b7ca90e0fab6a2082f2f1463d41fe176fc7dbe6cbe3cd73c312e62c85134059da5a4eb590dbf43a662fdaca24dfeb73ad75646959d
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroomaQY4/CFsrFJGlMlrWg6j8s:vvw9816vhKQLroLaQY4/wQTGaWhj8s
- TLSH T158537C835BEA2CF2F6F10232057859B5D22B9AD5A15DBEDBBB80CE1504372D1D53F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE