General
- Target Experiment.exe
- Size 434KB
- Sample260924-r8a3xafe89
- SHA256 ba7d4f05d3cc536ff352c054ea353bbcebe408ce051f7e59f3412f8bbf14e5c6
- MD5 c33b781d85f544ee0f1e950a2fff5f3d
- SHA1 e38b2cc421b086103cc413d23abe2effc49a61aa
- SHA512 1d01f0d4bf6bda37008e75898230c532d239b1604d93a628533ae22f9df25ba71d6c140d0d73dbb96fd58ce2621d77b1e7117ef511da4196b3bae3a9acf0b78e
- SSDEEP 6144:W6S7CwG2O1YfkRjRmx+TXBqProkgD+Dph0lhSMXlBXBWnYq6JC2XXQ:H6sBRmx+TXBurobD0ph0lhSMXliD
- TLSH T19C949D16B3E541F9E22786788C970A05EA3378414751EBCF03A8E9B62F636D15F3AF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Experiment.exe
Resource
win10ltsc2021-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Experiment.exe
- Size 434KB
- SHA256 ba7d4f05d3cc536ff352c054ea353bbcebe408ce051f7e59f3412f8bbf14e5c6
- MD5 c33b781d85f544ee0f1e950a2fff5f3d
- SHA1 e38b2cc421b086103cc413d23abe2effc49a61aa
- SHA512 1d01f0d4bf6bda37008e75898230c532d239b1604d93a628533ae22f9df25ba71d6c140d0d73dbb96fd58ce2621d77b1e7117ef511da4196b3bae3a9acf0b78e
- SSDEEP 6144:W6S7CwG2O1YfkRjRmx+TXBqProkgD+Dph0lhSMXlBXBWnYq6JC2XXQ:H6sBRmx+TXBurobD0ph0lhSMXliD
- TLSH T19C949D16B3E541F9E22786788C970A05EA3378414751EBCF03A8E9B62F636D15F3AF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Manipulates Digital Signatures
Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
-
Boot or Logon Autostart Execution: Print Processors
Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory